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Abstract. We introduce a general approach based on selective verification and obtain approximate mechanisms 
without money for maximizing the social welfare in the general domain of utilitarian voting. Having a good allo¬ 
cation in mind, a mechanism with verification selects few critical agents and detects, using a verification oracle, 
whether they have reported truthfully. If yes, the mechanism produces the desired allocation. Otherwise, the mech¬ 
anism ignores any misreports and proceeds with the remaining agents. We obtain randomized truthful (or almost 
truthful) mechanisms without money that verify only 0{\nm/e) agents, where m is the number of outcomes, inde¬ 
pendently of the total number of agents, and are (1 — e)-approximate for the social welfare. We also show that any 
truthful mechanism with a constant approximation ratio needs to verify I7(logm) agents. A remarkable property 
of our mechanisms is robustness, namely that their outcome depends only on the reports of the truthful agents. 


1 Introduction 

Let us start with a simple mechanism design setting where we place a facility on the line based on the 
preferred locations of n strategic agents. Each agent aims to minimize the distance of her preferred location 
to the facility and may misreport her location, if it finds it profitable. Our objective is to minimize the 
maximum distance of any agent to the facility and we insist that the facility allocation should be truthful, i.e., 
no agent can improve her distance by misreporting her location. The optimal solution is to place the facility 
at the average of the two extreme locations. However, if we cannot incentivize truthfulness through monetary 
transfers (e.g., due to ethical or practical reasons, see also ifZ/ll ). the optimal solution is not truthful. E.g., the 
leftmost agent has an incentive to declare a location further on the left so that the facility moves closer to her 
preferred location. In fact, for the infinite real line, the optimal solution leads to no equilibrium declarations 
for the leftmost and the rightmost agent. The fact that in this simple setting, the optimal solution is not 
truthful was part of the motivation for the research agenda of approximate mechanism design without money, 
introduced by Procaccia and Tennenholtz llTTl . They proved that the best deterministic (resp. randomized) 
truthful mechanism achieves an approximation ratio of 2 (resp. 3/2) for this problem. 

Our work is motivated by the simple observation that the optimal facility allocation can be implemented 
truthfully if we inspect the declared locations of the two extreme agents and verify that they coincide with 
their preferred locations (e.g., for their home address, we may mail something there, visit them or ask for a 
certificate). Inspection of the two extreme locations takes place before we place the facility. If both agents are 
truthful, we place the facility at their average. Otherwise, we ignore any false declarations and recurse on the 
remaining agents. This simple modification of the optimal solution is truthful, because non-extreme agents 
do not affect the facility allocation, while the two extreme agents cannot change the facility location in their 
favor, due to the verification step. Interestingly, the Greedy algorithm for fe-Eacility Location (see e.g., 

Sec. 2.2]) also becomes truthful if we verify the k agents allocated a facility and ignore any liars among 
them (see Section IHl. Greedy is 2-approximate for minimizing the maximum agent-facility distance, in any 
metric space, while lUdll shows that there are no deterministic truthful mechanisms (without verification) 
that place k > 2 facilities in tree metrics and achieve a bounded (in terms of n and k) approximation ratio. 

Selective Verification: Motivation and Justification. Verifying the declarations of most (or all) agents and 
imposing large penalties on liars should suffice for fhe frufhful implemenfafion of socially efficienl solutions 
(see e.g., ||6l). Buf in fhe facilify locafion examples above, we Irulhfully implemenf fhe opfimal (or an almost 


optimal) solution by verifying a very small number of agents (independent of n) and by using a mild and 
reasonable penalty. Apparently, verification is successful in these examples because it is selective, in the 
sense that we verify only the critical agents for the facility allocation and fully trust the remaining agents. 

Motivated by this observation, we investigate the power of selective verification in approximate mech¬ 
anism design without money in general domains. We consider the general setting of utilitarian voting with 
m outcomes and n strategic agents, where each agent has a nonnegative utility for each outcome. We aim 
at truthful mechanisms that verify few critical agents and approximate the maximum social welfare, i.e., the 
total utility of the agents for the selected outcome. Our goal is to determine the best approximation guarantee 
achievable by such mechanisms with limited selective verification, so that we obtain a better understand¬ 
ing of the power of limited verification in mechanism design without money. Our main result is a smooth 
and essentially best possible tradeoff between the approximation ratio and the number of agents verified by 
randomized truthful (or almost truthful) mechanisms with selective verification. 

Our general approach is to start from a (non-truthful) allocation rule / with a good approximation guar¬ 
antee for the social welfare and to devise a mechanism F without money that incentivizes truthful reporting 
by selective verification. The mechanism F first selects an outcome o and an (ideally small) verification set 
of agents according to / (e.g., for facility location on the line, the allocation rule / is to take the average of 
the two extreme locations, the selected outcome o is the average for the particular instance and the verifica¬ 
tion set consists of the two extreme agents). Next, F detects, through the use of a verification oracle, whether 
the selected agents are truthful. If yes, the mechanism outputs o. Otherwise, F excludes any misreporting 
agents and continues with the remaining agents. We note that F asks the verification oracle for a single bit of 
information about each agent verified: whether she has reported truthfully or not. F excludes misreporting 
agents from the allocation rule, so it does not need to know anything else about their true utilities. 

Instead of imposing some explicit (i.e., monetary) penalty to the agents caught lying by verification, 
the mechanism F just ignores their reports, a reasonable reaction to their revealed attempt of manipulating 
the mechanism. We underline that liars still get utility from the selected outcome. It just happens that their 
preferences are not taken into account in the allocation. For these reasons, the penalty of exclusion from the 
mechanism is mild and compatible with the spirit of mechanisms without money. 

Selective verification allows for an explicit quantification of the amount of verification and is applicable 
to essentially any domain. From a theoretical viewpoint, we believe that it can lead to a deep and delicate 
understanding of the power of limited verification in approximate mechanism design without money. From 
a practical viewpoint, the extent to which selective verification and the penalty of ignoring false declarations 
are natural very much depends on the particular domain / application. E.g., for applications of facility loca¬ 
tion, where utility is usually determined by the home address of each agent, public authorities have simple 
ways of verifying it. E.g., registration to a public service usually requires a certificate of address. Eailure to 
provide such a certificate usually implies that the application is ignored, with no penalties attached. 

Technical Approach and Results. A (randomized) mechanism with selective verification is truthful (in 
expectation) if no matter the reports of the other agents and whether they are truthful or not, truthful reporting 
maximizes the (expected) utility of each agent from the mechanism. Two nice features of our allocation 
rules (and mechanisms) is that they are strongly anonymous and scale invariant. The former means that the 
allocation only depends on the total agents’ utility for each outcome (and not on each agent’s contribution) 
and the latter means that multiplying all valuations by a positive factor does not change the allocation. 

Eor mechanisms with selective verification, truthfulness is an immediate consequence of two natural 
(and desirable) properties: robustness and voluntary participation. Robustness is a strong property made 
possible by selective verification. A mechanism with verification F is robust if F completely ignores any 
misreports and the resulting probability distribution is determined by the reports of truthful agents only. So, 
if F is robust, no misreporting agent can change the resulting allocation whatsoever. We achieve robustness 
through obliviousness of F to the declarations of misreporting agents not verified (see also ifT^ Sec. 5]). 
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Specifically, a randomized mechanism F is oblivious if the probability distribution of F over the outcomes, 
conditional on the event that no misreporting agents are included in the verification set, is identical to the 
probability distribution of F if all misreporting agents are excluded from the mechanism. By induction on 
the number of agents, we show that obliviousness is a sufficient condition for robustness (Lemma lTT]) . To the 
best of our knowledge, this is the first time that robustness (or a similar) property is considered in mechanism 
design. We defer the discussion about robustness and its comparison to truthfulness to Section IAT^ 

Robustness leaves each agent with essentially two strategies: either she reports truthfully and participates 
in the mechanism or she lies and is excluded from the mechanism. An allocation rule satisfies voluntary 
participation (or simply, participation ) if each agent’s utility when she is truthful is no less than her utility 
when she is excluded from the mechanism. Robustness and participation immediately imply truthfulnesqj 
(Lemma [TH). We prove that strongly anonymous randomized allocation rules that satisfy participation are 
closely related to maximal in distributional range rules (see e.g., i9l2ll '). i.e., allocation rules that maximize 
the expected social welfare over a (not necessarily proper) subset of probability distributions over outcomes. 
Specifically, we show that maximizing the social welfare is sufficient for participation tLemma lZTl) . while 
for scale invariant and continuous allocation rules, it is also necessary tLemma lX2l) . 

As a proof of concept, we apply selective verification to fc-Facility Location problems (Section|4|, which 
have served as benchmarks in approximate mechanism design without money (see e.g., II27I1I22I12II and the 
references therein). We show that Greedy ( |[30l Section 2.2]) and Proportional |[22l satisfy participation and 
are robust and truthful, if we verify the k agents allocated the facilities (Theorems 14. Il and l4.2l) . 

For the general setting of utilitarian voting, we aim at strongly anonymous randomized allocation rules 
that are maximal in distributional range, so that they satisfy participation, and oblivious, so that they achieve 
robustness. In Section |5l we present the Power mechanism, which selects each outcome o with probability 
proportional to the £-th power of the total utility for o, where t' > 0 is a parameter. Intuitively, Power provides 
a smooth transition from the (robust and truthful) uniform allocation, where each outcome is selected with 
probability 1/m, for £ = 0, to the optimal solution, for I ^ oo. Power approximately maximizes the social 
welfare and approximately satisfies participation. It is also scale invariant and, due to the proportional nature 
of its probability distribution, is oblivious and robust. Power can be implemented with selective verification 
of at most I agents. Using I = In m/e, we obtain that for any e > 0, Power with selective verification of 
In m/e agents, is robust, e-truthful and (1 — e)-approximate for the social welfare (Theorem l5.1l) . 

To quantify the improvement, we show that without verification, in the general setting of utilitarian vot¬ 
ing, the best possible approximation ratio of any randomized truthful mechanism is 1/m (see Section lA.l 111 . 
In a slightly more restricted setting with injective valuations ifTOl . the best known randomized truthful mech¬ 
anism has an approximation ratio of and the best possible approximation ratio is 0(m“^/^). 

Moreover, the amount of verification is essentially best possible, since we prove that any truthful mechanism 
with constant approximation ratio needs to verify f2(log m) agents (Theorem ih. 111 . We essentially match this 
lower bound, that applies to all mechanisms, by strongly anonymous and scale invariant mechanisms. 

In Section |7j we characterize the class of scale invariant and strongly anonymous truthful mechanisms 
that verify o(n) agents and achieve full allocation, i.e., they result in some outcome with probability 1. 
We prove that any such mechanism must employ a constant allocation rule, i.e., a probability distribution 
that does not depend on the agent declarations. Therefore, such mechanisms cannot achieve nontrivial ap¬ 
proximation guarantees. Our characterization reveals an interesting and deep connection between continuity 
(which is necessary for low verification), full allocation, and maximal in distributional range mechanisms. 

Relaxing some of the properties in the characterization, we can obtain (fully) truthful mechanisms with 
low verification. Relaxing full allocation, we obtain the Partial Power mechanism (Section [H), and relaxing 
scale invariance, we obtain the Exponential mechanism (Section|9ll. Both are truthful, robust. For any e > 0, 

* The reader is invited to verify that the average mechanism for facility location on the line is scale invariant, not strongly anony¬ 
mous, oblivious (and thus, robust) and satisfies participation. Robustness and participation imply that the mechanism is truthful. 
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Fig. 1. The main properties of our mechanisms. Partial allocation means that the mechanism may result in an artificial outcome of 
valuation 0 for all agents (e.g., we may refuse to allocate anything, for private goods, or to setup the service, for public goods). We 
depict in bold the property whose relaxation allows the mechanism to escape the characterization of Theorem l7.ll 

they verify 0(lnm/e^) agents in the worst-case and In m/e agents in expectation, respectively. Partial 
Power is (1 — e)-approximate, while Exponential has an additive error of ere. For Exponential, we can have 
an approximation ratio of 1 — e, given a constant factor estimation of the value maximum social welfare. All 
the mechanisms can be implemented in polynomial or expected polynomial time in re and m. 

The properties of our mechanisms are summarized in Fig. [T] In all cases, we achieve a smooth tradeoff 
between the number of agents verified and the quality of approximation. Rather surprisingly, the verification 
depends on m, the number of outcomes, but not on re, the number re of agents. Also, we discuss fSection lA.3l) 
an application to the Combinatorial Public Project problem (see e.g., II28I24II ). 

Related Work. Due to lack of space, we restrict our attention to the most relevant previous work (see 
also Section IATI) . Previous work II2I6I151I demonstrated that partial verification is essentially useless in the 
design of truthful mechanisms. Therefore, verification should be exact, i.e., it should forbid even negligible 
deviations from the truth, at least for some types of misreports. Thus, recent research has focused on the 
power of exact verification schemes that use either limited or costly verification and mild penalties. 

In this direction, |6| introduces probabilistic verification as a general framework for the use of verifi¬ 
cation in mechanism design. They show that almost any allocation rule can be implemented whit a truthful 
mechanism with money and probabilistic verification, provided that (i) the detection probability is positive 
for all agents and for negligible deviations from the truth; and that (ii) each liar incurs a sufficiently large 
penalty. Here, we instead use selective verification and the reasonable penalty of ignoring misreports and 
we verify only a small subset of agents instead of almost all of them. 

Our approach of selective verification is conceptually similar to the setting of ||5l, which considers truth¬ 
ful allocation of an indivisible good without money and with costly selective verification and seeks to maxi¬ 
mize the social welfare minus the verification cost. Nevertheless, our setting and our mechanisms are much 
more general, we resort to approximate mechanisms (rather than exact ones) and treat the verification cost 
as a different efficiency criferion (insfead of incorporating if in fhe social objecfive). Moreover, selective ver- 
ificafion bears some resemblance fo iflTll . which considers frufhful mechanisms wifh money for single-unif 
and mulfi-unif auctions and aims af a good fradeoff befween fhe social welfare and fhe paymenfs charged. 

There is a significanf amounf of work on mechanism design wifh verificafion where eifher fhe sfrucfure 
of fhe opfimal mechanism is characferized (see e.g., 1291 ). or mechanisms wifh money and verificafion are 
shown fo achieve beffer approximafion guaranfees fhan mechanisms wifhouf verificafion (see e.g., ||4]20l).To 
fhe besf of our knowledge, our work is fhe firsf where frufhful mechanisms wifh limifed selective verification 
(insfead of partial or “one-sided” verificafion applied fo all agenfs wifh posifive ufilify) are shown fo achieve 
besf possible approximafion guaranfees for fhe general domain of ufilifarian voting. 

From a fechnical viewpoinf, fhe idea of partial allocafion in approximafe mechanism design wifhouf 
money has been employed wifh remarkable success in Q. However, fhis fechnique can achieve very re- 
sfricfed resulfs in maximizing social welfare wifhouf verificafion in a very general seffing as ufilifarian 
vofing (see Secfion lA.llI) . Moreover, our mofivafion for using fhe exponential mechanism wifh selecfive 
verificafion came from II23I181 . due fheir fradeoffs befween fhe approximafion guaranfee and fhe probabilify 
of fhe gap mechanism (resp. amounf of paymenfs) required for frufhfulness. 
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2 Notation and Preliminaries 


For any integer m > 1, we let [m] = {1,..., m}. For an event E, Pr[S] denotes the probability of E. For 
a random variable X, E[X] denotes the expectation of X. For a finite set S, A{S) is the unit simplex over 
S, which includes all probability distributions over S. For a vector x = (xi,..., Xm) and some j G [m], 
X-j is X without Xj. For a nonempty S C [m], xg = {xj)j^s is the projection of x to S. For vectors x 
and y, X + y = (xi + ?/i,..., Xm + Vm) denotes their coordinate-wise sum. For a vector x and an ^ > 0, 
x^ = (xf,..., x^) is the coordinate-wise power of x and \\x\\^ = {YlJLi is the .^-norm of x. For 

convenience, we let ||x||i = \x\. Moreover, ||x||oo = is the infinity norm of x. 

Agent Valuations. We consider a set At of n strategic agents with private preferences over a set O of 
outcomes. We focus on combinatorial problems, assume that O is finite and let m = |0| be the number of 
different outcomes. The preferences of each agent i are given by a valuation function or type Xi : O ^ M>o 
that i seeks to maximize. The set of possible valuations is the domain D = M>q. We usually regard each 
valuation as a vector Xi = {xi{j))j^[m]^ where Xi{j) is Fs valuation for outcome j. A valuation profile 
is a tuple x = (xi,... ,Xn) consisting of the agents’ valuations. Given a valuation profile x, w{x) = 
xi + ■ ■ ■ + Xn the vector of the total valuation, or simply, of the weight, for each outcome. We usually 
write w, instead of w{x), when x is clear from the context. 

Allocation Rules. A (randomized) allocation rule f : —)• A{0) maps each valuation profile to a 

probability distribution over O. To allow for exclusion of some agents from /, we always assume that / is 
well defined for any number of agents n', 0 < n' < n. We regard the probability distribution of / on input 
X as a vector /(x) = (/j(®))jg[m ]5 where fj(x) is the probability of outcome j. Then, the expected utility 
of agent i from /(x) is equal to the dot product Xj • /(x). An allocation rule is constant if for all valuation 
profiles X and y, /(x) = f{y), i.e., the probability distribution of / in independent of the valuation profile. 
E.g., the uniform allocation rule, that selects each outcome with probability 1/m, is constant. 

A rule / achieves full allocation if for all x, |/(x)| = 1, and partial allocation if |/(x)| < 1, for some 
X. A full allocation rule always outputs an outcome o G O, while a partial allocation rule may also output 
an artificial (or null) outcome not in O. We assume that all agents have valuation 0 for the null outcome. 

Two nice properties of our allocation rules is that they are strongly anonymous and (most of them) 
scale invariant. An allocation rule / is scale invariant if for any valuation profile x and any a G M>o, 
/(ax) = /(x), i.e., scaling all valuations in x by a does not change the allocation. An allocation rule / 
is strongly anonymous if /(x) depends only on the vector w{x) with outcome weights. Formally, for all 
valuation profiles x and y (possibly with a different number of agents) with w{x) = w{y), /(x) = f{y). 
Hence, a strongly anonymous rule can be regarded as a one-agent allocation rule f : D ^ ^{O). 
Approximation Guarantee. The social efficiency of an allocation rule / is evaluated by a social objective 
function g : x O —)• M>o. We mostly consider the objective of social welfare, where we seek to maximize 

■/(*)• The optimal social welfare of a valuation profile x is || IIcxd ■ An allocation rule / has 

approximation ratio p G (0,1] (resp. additive error <5 > 0) if for all valuation profiles x, ' /(®) ^ 

p IIEILi ®illoo (resp. EILi • /(®) > IIELi ®illoo - 

Voluntary Participation and MIDR. An allocation rule / satisfies voluntary participation (or simply, 
participation) if for any agent i and any valuation profile x, Xj • /(x) > Xj • /(x_j), i.e., Fs utility does 
not decrease if she participates in the mechanism. For some e G (0,1], / satisfies e-participation if for all 
agents i and valuation profiles x, Xj • /(x) > e Xj • /(x_j). An allocation rule / is maximal in distributional 
range (MIDR) if there exist a range Z of (possibly partial) allocations and a function /i : Z —)• M such that 
for all valuation profiles x, /(x) = argmax^g^ Er=i ^ E h{z) (see e.g., Il9l2ll ). The following show 
that MIDR is a sufficient condition for participation and that for scale invariant and strongly anonymous 
continuous allocations, MIDR is also necessary (the proofs can be found in Section lAAl and Section IA3]) . 

Lemma 2.1. Let f be any MIDR allocation rule. Then, f satisfies participation. 


4 








Lemma 2.2. For any scale invariant and strongly anonymous continuous allocation rule f that satisfies 
participation, there is a range Z of (possibly partial) allocations such that f{x) = argmax^g^ x ■ z. 

3 Mechanisms with Selective Verification and Basic Properties 

A mechanism with selective verification F takes as input a reported valuation profile y and has oracle access 
to a binary verification vector s € { 0 ,1}", with Sj = 1 if agent i has truthfully reported yi = xi, and s, = 0 
otherwise. In fact, we assume that F verifies an agent i through a verification oracle ver that on input i, 
returns ver(f) = s*. So, we regard a mechanism with verification as a function F : x {0,1}*^ —)• ^{O). 

We highlight that although the entire vector s appears as a parameter of F, for notational convenience, the 
outcome of F actually depends on few selected coordinates of s. We denote V(y) C N, or simply V, the 
set of agents verified by F on input y. As for allocation rules, we treat the probability distribution of F over 
outcomes as an m-dimensional vector and assume that F is well defined for any number of agents n' < n. 

Our approach is to start from an allocation rule / and to devise a mechanism F that motivates truthful 
reporting by selective verification. We say that a mechanism F with selective verification is recursive if 
there is an allocation rule / such that F operates as follows: on a valuation profile y, F selects an outcome 
o, with probability fo{y), and a verification set V{y), and computes the set L = {i £ V{y) : ver(f) = 0} 
of misreporting agents in V(y). If L = 0, F returns o. Otherwise, F recurses on y-L- Our mechanisms are 
recursive, except for Partial Power (Section [ 8 ]l, which adopts a slightly different reaction to L 7 ^ 0. 

Given an allocation rule /, we say that a mechanism with verification F is an extension of / is for 
all valuation profiles x, F(x,l) = f{x). Namely, F behaves exactly as / given that all agents report 
truthfully. For the converse, given a mechanism F, we say that F induces an allocation rule / if for all x, 
f{x) = F{x,l). For clarity, we refer to mechanisms with selective verification simply as mechanisms, and 
denote them by uppercase letters, and to allocation rules simply as rules or algorithms, and denote them by 
lowercase letters. A mechanism F has a property of an allocation rule (e.g., scale invariance, partial or full 
allocation, participation, approximation ratio) iff the induced rule / has this property. 

A mechanism F is e-truthful, for some e € (0,1], if for any agent i, for any valuation pair Xi and yi and 
for all reported valuations and verification vectors s_j, 

Xi ■ F{{y_i,Xi), {s_i, 1)) > exi ■ F{{y_i,yi), (s-i,0)) 

A mechanism F is truthful if it is 1-truthful. Namely, no matter the reported valuations of the other agents 
and whether they report truthfully or not, the expected utility of agent i is maximized if she reports truthfully. 

Robustness and Obliviousness. A remarkable property of our mechanisms is robustness, namely that they 
ignore the valuations of misreporting agents and let their outcome be determined by the valuations of truthful 
agents only. Formally, a mechanism F is robust if for all reported valuations y and verification vectors 
s, F{y, s) = F(yx(s)^ (Ij ■ • • l))^ with the equality referring to the probability distribution of F, where 
T{s) = {f G : Sj = 1} is the set of truthful agents. Next, we simply use T, instead of T{s). 

A mechanism with selective verification F is oblivious (to the declarations of misreporting agents not 
verified) if for all valuation profiles y and verification vectors s, with L = N \ T{s), and any outcome o, 

Pr[F(y, s) = o\V{y)nL = ^= Pr[F(y_L, 1) = o] (1) 

I.e., if the misreporting agents are not caught, they do not affect the probability distribution of F (see also 
ifTSll i. By induction on the number of misreports, we show that obliviousness is sufficient for robustness. 

Lemma 3.1. Let F be any oblivious recursive mechanism with selective verification. Then, F is robust. 
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Proof. We fix a valuation profile y and a verification vector s, and prove that for any outcome o £ O, 
Fi[F{y, s) = o] = FT[F{yT, 1) = o], where T F N is the set of truthful agents in y. Clearly, this implies 
that F is robust. The proof is by induction on the number of agents N. 

If = 0, the statement is obvious. So, we assume inductively that the statement holds for every proper 
subset of N. Let L = N \ T be the set of misreporting agents in y and let V be the verification set of F on 
input y. Then, 

Fi[F{y, s) = o] = Fi[F{y, s) = o\V n L = L'] Pr[L n L = L'] (2) 

L'CL 

We have that Pr[F(y, s) = o | y n L = 0] = Pr[F(yr, 1) = o], by ([T]), since F is oblivious. If V includes a 
non-empty set L' = VCiL, since F is recursive, it ignores their declarations and recurses on y-i'- Therefore, 
for all 0 / L' C L, Pr[F(y, s) = o\V D L = L'] = Fr[F{y_ii, s_i') = o] = Fr[F{yT, 1) = o], where 
the last equality follows from the induction hypothesis, because the agents in y-i' are a proper subset of 
agents in y. Therefore, using that Pr[F(y, s) = o\V (1L = L'] = Fic[F{yT, 1) = o], for all L' C L, in (ID, 
we obtain that Pr[F(y, s) = o] = Fj:[F{yT, 1) = o], i.e., that F is robust. □ 

Robustness, Participation and Truthfulness. In the Appendix, Section IA.61 we show that robustness and 
participation imply truthfulness (note that the converse may not be true, since a truthful mechanism with 
verification does not need to be robust). Then, by Lemma 12.11 and Lemma 13.11 we can focus on MIDR 
allocation rules for which the outcome and the verification set can be selected in an oblivious way. 

Lemma 3.2. For any e G (0,1], if a mechanism with selective verification F is robust and satisfies e- 
participation, then F is e-truthful. 

Quantifying Verification. Focusing on truthful mechanisms with verification, where the agents do not have 
any incentive to misreport, we bound the amount of verification when the agents are truthful (similarly to the 
definition of the approximation ratio of F as the approximation ratio of the induced allocation rule /). For a 
truthful mechanism F, this is exactly the amount of verification required so that F motivates truthfulness. 

Given a mechanism with verification F, its worst-case verification is Ver(F) = |y(a;)|, 

i.e., the maximum number of agents verified by F in any truthful valuation profile. If F is randomized, its 
expected verification is EVer(F) = maXx^D^ ®[|^(®)l]> where expectation is over all random strings used. 

4 Motivating Example: Facility Location Mechanisms with Selective Verification 

As a proof of concept, we apply mechanisms with verification to A:-Facility Location. In such problems, we 
have a metric space (M, d), where M is a finite set of points and d is a metric distance function. The out¬ 
comes are all subsets of k locations in M. Each agent i has a preferred location ti £ M and her “valuation” 
for outcome C is Xi{C) = —d{ti,C), i.e., minus the distance of her preferred location to the nearest facility 
in C. So, each agent i aims at minimizing d{ti,C). The mechanism F gets a profile 2 = (zi,, Zn) of 
reported locations. Using access to a verification oracle, F maps z to a set C of k facility locations. 
Maximum Cost. To minimize maxjgAr{d(ti, F(f, 1))}, i.e, the maximum agent-facility distance, we use 
the 2-approximate Greedy algorithm for A:-Center (see e.g., |[30l Sec. 2.2]). On input z. Greedy first allocates 
a facility to an arbitrary agent. As long as IC*! < A;, the next facility is allocated to the agent i maximizing 
d{zi,C). We extend Greedy to a mechanism with selective verification by inspecting the reported location 
Zi of every agent i allocated a facility. If all of them are truthful, we place the k facilities at C. Otherwise, 
we exclude any liars in C and recurse on the remaining agents. In the Appendix, Section lATTl we establish 
the properties of Greedy with verification. To quantify the improvement due to the use of verification, we 
highlight that there are no deterministic truthful mechanisms (without verification) that place k >2 facilities 
in tree metrics and achieve a bounded (in terms of n and k) approximation ratio (see Ifldl l. 
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Mechanism 1 The Power Mechanism Pow^(a;, s) 
let N be the set of the remaining agents and let L <— 0 
pick an outcome j ^ O and a tuple t e 

with probability proportional to the value of the term xt^ {j)xt2 U) ' " xtg (j) 
for each agent i G f do 

if ver(i) / 1 then L ^ LLi {i} 
if L / 0 then return Fow^{x_l, s_l) 
else return outcome j 


Theorem 4.1. The Greedy mechanism with verification for k-Facility Location is truthful and robust, is 
2-approximate for the maximum cost and verifies k agents. 

Social Cost. To minimize d{ti,F(t, 1)), i.e, the total cost of the agents, we use the Proportional 
mechanism |[22ll . which is 0(ln A:)-approximate Q. Proportional first allocates a facility to an agent chosen 
uniformly at random. As long as | C| < k, agent i is allocated the next facility with probability proportional to 
d{zi,C). Verifying the reported location of every agent allocated a facility, we obtain that (see Section IAT^ : 

Theorem 4.2. The Proportional mechanism with verification for k-Facility Location is truthful and robust, 
is 0(ln k)-approximate for the social cost and verifies k agents. 

5 The Power Mechanism with Selective Verification 

In this section, we present the Power mechanism, a recursive mechanism with verification that approximates 
the social welfare in the general domain of utilitarian voting. Power with parameter £ > 0 (or Pow^, for 
brevity, see also Mechanism [B is based on a strongly anonymous and scale invariant allocation that assigns 
probability proportional to the weight of each outcome raised to L Hence, for each valuation profile x, the 
outcome of Pow^ depends on the weight vector w = If agents are truthful, Pow^ results in 

each outcome j with probability w]lYl^=i proportional to (note that for f = 0, we get the 

uniform allocation, while for £ = oo, the outcome of maximum weight gets probability 1). To implement 
this allocation with low verification, we observe that each term can be expanded in r/ terms as follow^: 

= ( X] ) = X] ■■■xt, (j) (3) 

\i&N / t€N^ 

Hence, choosing an outcome j and a tuple f G with probability proportional^ to xtj^{j)xt 2 ij) ■ ■ ■ xt^{j), 
we end up with each outcome j with probability proportional to Wj. The verification set of Pow^ consists 
of the agents in t. Since at most i agents contribute to each term xt^ {j)xt 2 {j)' " xt^ {j), we can make Pow^ 
robust and almost truthful by verifying at most £ agents. In Section IA.91 we show that Pow^ is oblivious, 
due to its proportional nature, and thus robust, and satisfies m“^/^^^^^-participafion. Thus, we obtain that: 

Theorem 5.1. For any £ > 0, Pow^ with I = In m/s is robust and (1 — e)-truthful, has worst-case verifi¬ 
cation In m/e, and achieves an approximation ratio of {1 — £)for the social welfare. 

^ For example, let n = 3, f = 2 and Wj = xi X 2 + X 3 (we omit j from x’s for clarity). In IB, we expand Wj in 3^ = 9 terms as 
follows nfi = (xi -\-X 2 + * 3 )^ = a;ixi -\-x\X 2 +xia ;3 + X 2 X\ -\-x 2 X 2 -\-x 2 X 2 + 2 : 3 X 1 +X 3 X 2 +X 3 X 3 . Hence, in this example, 
t G {1, 2, 3} X {1, 2, 3}. Given that outcome j is chosen, each of these terms (and the corresponding tuple t) is selected with 
probability proportional to its value. E.g., X 1 X 2 and t = (1, 2) are selected with probability x\X 2 lvfi. 

^ To sample from © in Oim-yni) steps, we select outcome j with probability /|iy^|, and then, conditional onj, we select agent 

i in each position of t independently with probability Xi{j)/wj. Each tuple t is picked with probability Xti (y ) ■ • ■ Xtg^ (ji)/|ti;^|. 
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6 Logarithmic Verification is Best Possible 


Next, we describe a random family of instances where truthfulness requires a logarithmic expected verifica¬ 
tion. Below, we only sketch the main idea of the proof. The full proof can be found in Section lA. 101 

Theorem 6.1. Let F be randomized truthful mechanism that achieves a constant approximation ratio for 
any number of agents n and any number of outcomes F. Then, F needs expected verification l7(log m). 

Proof sketch. We consider m outcomes and m disjoint groups of agents. Each group has a large number v 
of agents. An agent in group j has valuation 0 for any other outcome and valuation either 1 or J for outcome 
j, where (5 > 0 is tiny (e.g., S = 1/v^^). In each group j, the probability that k agents, < k < u, have 
valuation 1 for outcome j is The expected maximum social welfare of such instances is ©(log m). 

We next focus on a group j of agents and fix x_j, i.e., fhe declarafions of fhe agenfs in all ofher groups. 
Using a simple argumenf, we can assume wlog. fhaf fhe probability of oufcome j depends only on fhe 
number of agenfs in group j fhaf declare 1 for j. Thus, fhe mechanism induces a sequence of probabilifies 
Po,pi,... ,Pk, ■ ■ ■, where p^ is fhe probability of oufcome j, given fhaf fhe number of agenfs fhaf declare 1 
for j is k. Since fhe mechanism is frufhful, if k agenfs declare 1 for oufcome j, we need fo verify each of 
fhem wifh probability af leasf pk—pk_i. Ofherwise, an agenf wifh valuation S can declare 1 and improve her 
expected ufilify. Therefore, for any fixed x^j, when k agenfs declare 1 for oufcome j, we need an expected 
verificafion of af leasf k{pk — Pk-i) for agenfs in group j. 

Assuming frufhful reporting and faking fhe expecfafion over fhe number of agenfs in group j wifh valu- 
afion 1 , we find fhaf expected verificafion for agenfs in group j is af leasf half fhe expected social welfare of 
fhe mechanism from group j, condifional on x^j, minus half fhe probability of oufcome j, condifional on 
X-j. Removing fhe condifioning on x^j and summing up over all groups j, we find fhaf expecfed verifica¬ 
fion is af leasf half fhe expecfed welfare of fhe mechanism minus 1/2. Since fhe mechanism has a consfanf 
approximafion ratio, fhere are insfances where fhe expecfed verificafion is l?(log m). □ 

7 Characterization of Strongly Anonymous Mechanisms 

Nexf, we characferize fhe class of scale invarianf and sfrongly anonymous frufhful mechanisms fhaf verify 
o{n) agenfs. The characferizafion is fechnically involved and consisfs of four main sfeps. We firsl prove fhaf 
fhese rules are continuous (for full proof see Section lA. 121) . 

Lemma 7.1. Let f be any scale invariant and strongly anonymous allocation rule. If f is discontinuous, 
every truthful extension F of f needs to verify Q{n) agents in expectation, for arbitrarily large n. 

Proof sketch. Firsl, we prove fhaf if / has a disconlinuify, fhere are 17 (n) agenfs fhaf have a very small 
valuation <5 > 0 and can change fhe allocalion by a consfanf factor, independenf of n and 5. Nexf, we focus 
on any frufhful extension F of f and show fhaf for every agenf i fhaf has fhe abilily fo change fhe allocalion 
by a consfanf factor, fhe probability fhaf F verifies i should be af leasf a consfanf, say C, due fo Irulhfulness. 
Therefore, fhe expecfed verificafion of F is af leasf C x 17 (n) = 17 (n). □ 

Therefore, if a frufhful mechanism F verifies o(n) agenfs and induces a scale invarianf and sfrongly 
anonymous allocalion rule /, Ihen / needs to be continuous. In Section lA. 131 we prove fhaf such an alloca- 
fion rule / satisfies parficipafion. Then, by Lemma l2^ we oblain fhe characferizafion fhaf such an allocalion 
rule / is MIDR. Finally, in Seclion lA. 141 we show fhaf any full allocalion and MIDR rule / is eilher con- 
slanl, i.e., ils probabilily dislribulion does nol depend on fhe valuation profile x, or has a disconlinuify af 1. 
Thus, we oblain fhe following characterization: 

Theorem 7.1. Let F be any truthful mechanism that verifies o(n) agents, is scale invariant and strongly 
anonymous and achieves full allocation. Then, F induces a constant allocation rule. 










Mechanism 2 The Partial Power Mechanism PartPow^’’'(a;, s) 

1: pick r tuples E 

2: with probability proportional to the value of the term ’Ylj^o U)^t 2 (j)''' (j) 

3: for each k E {1, r} and agent i E do 
4: if ver(i) / 1 then return ± 

5: with probability 1 — return null 

6: pick an outcome j £ O and a tuple t E 

7: with probability proportional to the value of the term xt^ {j)xt2 (j)''' (j) 

8 : for each agent i E t do 
9: if ver(z) / 1 then return _L 

10: return outcome j 


8 The Partial Power Mechanism with Selective Verification 

The Power mechanism, in Section |5l escapes the characterization of Theorem 17. II by relaxing participation 
(and thus, truthfulness). In this section, we present Partial Power which escapes the characterization by 
relaxing full allocation. Thus, Partial Power results in some outcome in O with probability less than 1, and 
with the remaining probability, it results in an artificial null outcome for which all agents have valuation 0. 

Lemma lT2l implies that social welfare maximization is essentially necessary for participation. The proof 
of Theorem 17.11 implies that maximizing the social welfare over A{0) results in discontinuous mechanisms 
that need f2(n) verification (e.g., let m = 2 and consider welfare maximization for weights ( 1,1 + e) and 
(1,1 — e), see also Lemma lAidt . Hence, we optimize over a smooth surface that is close to A(0), but slightly 
curved towards the corners, so that the resulting welfare maximizers are continuous. Precisely, we consider 
welfare maximization over the family of sets = { 2 ; E M>q : || 2 :||i_|_i/£ < (1 — l/r)m for all 

integers > 1. Welfare maximization over results in= (1—l/r)m^/ 

(Lemma [A.51) . a continuous allocation that is MIDR and satisfies parficipafion. Lemma IA3I shows fhaf for 
any £ > 1, fhe parfial allocation has approximation ratio (1 — for fhe social welfare. 

We nexf show fhaf fhere exisfs a robusf exfension PartPow^’'’ of fhe allocafion ^hh reasonable 
verification. Thus, we esfablish fhaf PartPow^’'" is frufhful. To fhis end, we infroduce Mechanism |2l Since 
fie,r) 

is sfrongly anonymous, we consider below fhe weighfs w = w{x) insfead of fhe valuafions x. If all 
agenfs are frufhful, PartPow^’'^ samples exacfly from In particular, sfeps 1-4 never resulf in _L, 

sfep 5 oufpufs null wifh probabilify 1 — and steps 6-10 work identically fo Pow^, since given 

fhaf fhe null oufcome is nol selecfed, each oufcome j is chosen wifh probabilify proporfional fo mj. 

The mosf inferesfing case is when some agenfs misreporf fheir valuafions. To achieve robusfness, we 
need fo ensure fhaf fhe probabilify disfribufion is idenfical fo fhe case where misreporfing agenfs are excluded 
from fhe mechanism. Similarly fo Pow^, misreporfing agenfs cannof affecf fhe relafive probabilities of each 
oufcome. In PartPow^’'’ however, fhey may affecf fhe probabilify of fhe null oufcome. Thus, PartPow^’'’ is 
nof oblivious and we cannof esfablish robusfness fhrough Lemma [34] or some varianf of if. 

Robusfness of PartPow^’’’ is obfained fhrough fhe special acfion ±, friggered when verificafion reveals 
some misreporfing agenfs. Then, PartPow^’^ needs fo allocate appropriafe probabilities fo each oufcome 
j and fo fhe null oufcome so fhaf fhe unconditional probabilify disfribufion of PartPow^’^’ is idenfical fo 
where T is fhe sef of frufhful agenfs. Therefore, whenever PartPow^’'’ refurns ±, we verify all 
agenfs, compute fhe weighf vector wt for fhe frufhful agenfs, and refurn each oufcome j wifh probabilify: 

— Pr[PartPow^’''(a;, s) = j \ PartPow^’’'(a;, s) / ±] Pr[PartPow^’^(ic, s) / ±] 
Pr[PartPow^’'’(a;, s) = _L] 
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The null outcome is return with probability 1 — We emphasize that these probabilities are cho¬ 

sen so that we cancel the effect of misreporting agents in the unconditional probability distribution of 
PartPow^’^ and achieve exactly the probability distribution Moreover, if the mechanism re¬ 

turns ±, we verify all agents. So, it is always possible to compute there probabilities correctly. 

The crucial and most technical part of the analysis is to show that pj ’s are always non-negative and their 
sum is at most 1. To this end, we employ steps 1-4. These steps implement additional verification and ensure 
that Pr[PartPow^’’'(£c, s) = ±] is large enough for this property to hold (see Section lA.16l for the details). 

Theorem 8.1. For every e > 0, there exist >1, such that Partial Power is truthful, robust, and (1 — e)- 
approximate for the social welfare, and verifies at most 0(lnm/e^) agents in the worst case. 

9 The Exponential Mechanism with Selective Verification 

Next, we consider the well known Exponential mechanism and show that it escapes the characterization of 
Section|7]by relaxing scale invariance. The Exponential mechanism (or Expo, for brevity) is strongly anony¬ 
mous and assigns a probability proportional to the exponential of the weight of each outcome. Eor each valu¬ 
ation profile X, fhe oufcome of Expo depends on m agenfs are Irulhful, Expo" (to) resulfs 

in oufcome j wifh probabilify j i.e., proportional fo where a > 0 is a parameter. 

As in SeclionlH we expand every term and verify only fhe agenfs in fhe fuple t corresponding fo each 
term in fhe expansion below (fhe sampling can be implemenfed as in foolnofe|3]l: 

^ f y: X,. (;>„ (i)... (4) 

£=0 ■ r =0 ■ 

The defailed descripfion of Expo" is similar fo Mechanism[T] wifh fhe only difference fhaf, in fhe second 
sfep, we pick an oufcome j E O, an infeger £ > 0 and a fuple t E wifh probabilify proporfional fo fhe 
value of fhe term xtj^{j)xt 2 {j) ■ ■ ■ Xt^{j)/{a^i\) (see also Mechanism [5] in fhe Appendix). The following 
summarizes fhe properties of Expo. 

Theorem 9.1. For any a > 0, Expo"(m) is robust and truthful, achieves an additive error ofalnm wrt. 
the maximum social welfare and has expected verification ||m||oo/a- 

Proof (sketch). Using an argumenf similar fo fhaf used for Power (see Secfion lA!^ . we can show fhaf Expo" 
is oblivious (nofe fhaf fhe allocafion of Pow^ is obfained from fhe allocation of Expo" if we condifion on a 
particular exponenf 1). Then, robusfness follows from Eemma lTTl because Expo" is a recursive mechanism. 
As for participation, fhe Exponential allocafion is known fo be MIDR wifh range Z = A(0) and function 
h{z) = —OiY^j Zj In Zj, i.e., a times fhe enfropy of fhe resulting allocation (see e.g., ifTSlU . Therefore, by 
Eemma l2Tl Expo" safisfies participation. Since if is also robusf, Eemma lT^ implies fhaf Expo" is Irulhful. 

Eor fhe verification, ([H) implies fhaf when all agenfs are Irulhful, fhe number of agenfs verified, given 
fhaf fhe selected oufcome is j, follows a Poisson dislribulion wifh parameter Wjja < ||ru||oo/a- Therefore, 
fhe expected verification is al mosl ||ru||oo/a. 

As for fhe approximation guaranfee, fhe oplimal social welfare ||ru||oo and fhe objective maximized by 
Expo" differ by a times fhe enfropy of fhe allocation, which is af mosl a In m (see also Secfion lA.171) . □ 

In many settings, we know (or can obfain in a Irulhful way, e.g., by random sampling) an eslimafion E 
of ||ru||oo wifh E > ||m||oo > pE, for some p E (0,1). Then, we can choose a = epE/In m and obfain an 
approximation ratio of 1 — e wifh expected verification \nm/{pe), for any e > 0. E.g., if for all agenfs i, 
\xi\ = l,n > ||m||oo > n/m. Then, using a = ne/ \nm, we have an additive error of en wifh verification 
In m/e. Moreover, wifh a = ne/(m In m), we have approximation ratio 1 — e wifh verification min m/e. 
Einally, nofe fhaf, since fhe number of agenfs verified follows a Poisson dislribulion, by Chernoff bounds, 
fhe verification bounds hold wifh high probabilify in addition fo holding in expeclalion. 
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A Appendix 


A.l Other Related Previous Work 

The extensive use of monetary transfers in mechanism design is principally because in absence of money, 
very little can be done to enforce truthfulness. However, there are settings where monetary transfers might be 
unacceptable, infeasible, or undesirable (see e.g., Il27l for examples). To circumvent the impossibility result 
of Gibbard-Satterthwaite in such settings, |[27l suggested to tradeoff social efficiency for truthfulness and 
introduced the framework of approximate mechanism design without money. The idea is to consider truthful 
mechanisms without money in a particular domain and determine the best approximation ratio achievable 
for an appropriate social objective. 

In principle, the notion of approximate mechanisms provides the designer with more flexibility. Nev¬ 
ertheless, there have been only few examples of truthful mechanisms with good approximation guarantees 
that are not based on additional assumptions. All of them concern some simple and restricted domains (see 
for e.g., II1I12I22I27II for placing 1 or 2 facilities in a metric space and |[2^ for voting with positional scoring 
rules). For less restricted domains, there are strong lower bounds on the best possible approximation ratio 
achievable by truthful mechanisms (see e.g., lfT4ll for deterministic facility location mechanisms). Therefore, 
for nontrivial approximation guarantees, we need either some assumptions on the direction or the extent of 
agent misreports, i.e., to use verification, or a way to implicitly penalize misreports, a.k.a. imposition. 

Probably the most natural and practically applicable notion of verification is symmetric partial verifi¬ 
cation (or e-verification), which explicitly forbids any false declaration at distance larger than e to the true 
type. Interestingly, II2I6I15II prove that symmetric partial verification it does not help in the design of truthful 
mechanisms (with or without money)! Hence, in order to make some difference in approximate mechanism 
design without money, verification should be exact, in the sense that it forbids even negligible deviations 
from the truth, at least for some types of misreports. Many interesting positive results in approximate mech¬ 
anism design without money use either “one-sided” verification or imposition (see e.g., nn 11 31191231251 k 
However, the use of imposition depends very much on the particular application (see e.g., 111311912511 k while 
“one-sided” verification explicitly forbids a particular type of false declarations for all agents with positive 
utility (see e.g., ifTll k So, through theoretically interesting, “one-sided” verification is difficult to apply in 
practice. Thus, starting from |6], recent research has focused on the power of exact verification schemes that 
use either limited or costly verification and mild (or at least bounded) penalties for the liars. 

Working in this direction, we seek a better and more delicate understanding of the power of verification 
in approximate mechanism design without money. Significantly departing from most of the previous work, 
we develop a general approach to the use of verification in mechanism design without money that is appli¬ 
cable to essentially any domain and does not resort to any explicit (e.g., monetary) penalties that decrease 
the utility of misreporting agents. 

A.2 Conclusions and Discussion 

In this work, we introduce a general approach to approximate mechanism design without money and with 
selective verification and apply it to the general domain of utilitarian voting (and to Combinatorial Public 
Project and to /c-Facility Location). We focus on strongly anonymous randomized mechanisms and char¬ 
acterize such mechanisms that are truthful in expectation, scale invariant, achieve full allocation and have 
reasonable verification. By relaxing truthfulness, full allocation and scale invariance, we obtain three mech¬ 
anisms, namely Power, Partial Power, and Exponential, that are truthful (or almost truthful, for Power), 
achieve an approximation ratio of 1 — e for the social welfare, and verify O (In m/e) agents, or 0(lnm/e^) 
agents for Partial Power, where m is the number of outcomes. Hence, we obtained a smoothed tradeoff 
between the number of agents verified and the quality of approximation. From a technical viewpoint, our 
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mechanisms are based on smooth proportional-like randomized allocation rules. Truthfulness is a conse¬ 
quence of participation, which is closely related to maximal-in-distributional-range, and robustness, which 
is closely related to obliviousness to the misreporting agents not included in the verification set. 

The property of robustness, i.e., namely that the probability distribution of the mechanism does not 
depend on misreporting agents, seems quite remarkable. To the best of our knowledge, this is the first 
time that robustness (or a similar) property is considered in mechanism design. Actually, with the possible 
exception of constant mechanisms, whose probability distribution over outcomes is independent of the agent 
declarations, a mechanism can be robust only if it uses exact verification. 

To see that robustness is a strong property, recall that truthfulness means that a misreporting agent can¬ 
not change the allocation in her favor, while robustness means that a misreporting agent cannot change the 
allocation whatsoever. Hence, the definition (and the proof) of truthfulness assumes a utility function that 
each agent maximizes by truthful reporting. Robustness, on the other hand, does not refer to the utility func¬ 
tion of the agents. Any misreport that can be caught by the verification oracle does not affect the probability 
distribution of a robust mechanism, no matter the incentives or the utility function of misreporting agents. 

We believe that robustness can be very useful when the agent valuations are not declared explicitly to 
the mechanism, but they are deduced from their declarations on some observable types. E.g., this happens in 
the Facility Location domain, where the agents declare their locations to the mechanism, and the definition 
of truthfulness assumes that each agent wants a facility as close as possible to her declared location and that 
her disutility increases linearly with the distance (see also llT2l ). On the other hand, robustness only depends 
on whether each agent declares her true location (e.g., her true home address) to the mechanism, not on 
whether she wants a facility close, not so close, or far away from her declared location. 

A.3 An Application to Combinatorial Public Project 

The Combinatorial Public Project Problem (CPPP) was introduced in 1128 12411 and is a well-studied problem 
in algorithmic mechanism design. An instance of CPPP consists of a set R with r resources, a parameter 
k, 1 < k < r, and n strategic agents, where each agent i has a function a;* : 2 ^ —)• M>o that assigns a 
non-negative valuation Xi{S) to each resource subset SCR. The objective is to find a sef C of k resources 
fhaf maximizes Yli Xi{C), i.e., fhe social welfare of fhe agenfs from C. We assume fhaf all valuafions Xi are 
normalized, i.e., a;j(0) = 0, and monotone, i.e., Xi(Si) < Xi{S 2 ) for all Si C S' 2 . 

The valuafion funcfions Xi are implicifly represenfed fhrough a value oracle, which refurns fhe valuation 
Xi{S) of any resource subsef S in 0(1) time. Then, CPPP is NP-hard and practically inapproximable in 
polynomial time, under sfandard compufafional complexify assumptions (see 1281 for fhe defails). If fhe 
valuation functions Xi are submodular, i.e., each Xi satisfies Xi{Si U S2) + Xi{Si H ^2) < Xi{Si) + Xi{S2), 
for all S'!, 5'2 C R, CPPP can be approximated in polynomial lime wilhin a facfor of 1 — 1/e. If fhe valuafion 
funcfions Xi are subadditive, i.e., each Xi satisfies Xi{Si U S2) < -|- Xi{S2), for all S'!, S '2 ^ R, 

CPPP can be approximafed in polynomial time wilhin a faclor of while approximaling if wilhin any 

faclor heller lhan 7 -“^/^+^, for any consfanl e > 0 , requires exponenlial communicalion || 2 ^ . 

In 1241 . if was shown fhaf for submodular valuafions, CPPP cannol be approximafed in polynomial 
time (or wilh polynomial communication) by deterministic Irulhful mechanisms (wilh money) wilhin any 
faclor heller lhan for any consfanl e > 0. A similar communicalion complexify lower bound 

was shown in (Rj for randomized Irulhful in expeclalion mechanisms wilh money. So, fhe polynomial-lime 
approximabilily of CPPP wilh submodular valuafions is dramatically heller lhan ils approximabilily by 
polynomial-lime Irulhful mechanisms wilh money. Allhough fhe approximabilily of CPPP by polynomial 
time Irulhful mechanisms wilh money has received considerable attention, lo Ihe besl of our knowledge, Ihis 
is fhe firsl time lhal Ihe approximabilily of CPPP by Irulhful mechanisms wilhoul money is considered. 

CPPP, wilh general valuation functions, can be nalurally casl in our framework of ulililarian voting, wilh 
Ihe oulcome sel O consisting of all resource subsels S wilh |5| = fc (hence, we have m < r^). Then, our 
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mechanisms imply the following results on the approximability of CPPP with general valuation functions 
by mechanisms without money and with selective verification: 

Power. For any e > 0, the Power mechanism always allocates a set of k resources, is robust, e-truthful, 
achieves an approximation ratio of 1 — e and verifies af mosf k log r/e agenfs. 

Partial Power. For any e > 0, fhe Partial Power mechanism allocates a sef of k resources wifh probabilify 
1 — 0{e), is robusf, Irulhful, achieves an approximafion rafio of 1 — e and verifies 0{k log r/e^) agenfs. 
Nofe thaf the empty set can naturally play the role of the null outcome for Partial Power. 

Exponential. Since Exponential is not scale invariant, we need to assume that max 5 ci?,|s|<A; Xi{S) < 1, for 
every agent i. Then, for any e > 0, the Exponential mechanism always allocates a set of k resources, is 
robust, truthful, and achieves an additive error of en with verification of 0{k log r/e) agents, or achieves 
an approximation ratio of 1 — e with verification of 0{kr^ log r/e) agents (where the verification bounds 
hold with high probability). 

These guarantees are very strong and rather surprising, especially if the number n of agents is signifi¬ 
cantly larger than k log r, which is the case in many practical settings. We almost reach the optimal social 
welfare of the famous VCG mechanism, which achieves truthfulness through (potentially very large) pay¬ 
ments, using truthful mechanisms without money that verify a small number of agents independent of n. 
It becomes even more interesting if we recall that the penalty for a misreporting agent, through which we 
enforce truthfulness, is just the exclusion of the agent’s preferences from the decision making process. 

The mechanisms above run in time polynomial in the total number of outcomes and in the number 
of agents n. So, if the valuation functions are implicitly represented by value oracles, they are not computa¬ 
tionally efficient. However, we still need to resort to approximate solutions, because, in absence of money, 
the optimal solution is not truthful. We underline that computational inefficiency is unavoidable, since our 
approximafion rafio of 1 — e, for any consfanf e > 0, is dramatically heller lhan known impossibilily resulls 
on the polynomial time approximability of CPPP. 

If we insist on computationally efficient mechanisms without money for CPPP, we can combine our 
mechanisms with existing maximal-in-range mechanisms so that everything runs in polynomial time. E.g., 
for CPPP with subadditive valuation functions, we can use the maximal-in-range mechanism of ll^ Sec. 3.2] 
and obtain randomized polynomial-time truthful mechanisms without money that achieve an approximation 
ratio of 0(min{A:, ^/r}) for the social welfare with selective verification of 0{k\ogr) agents. 

A.4 The Proof of Lemma IXTl 

Eet i be any agent. Since the allocation rule / is MIDR, we obtain the following inequalities: 

n n 

Xj ■ f{x) + h{f{x)) >Y^r f{x-i) + h{f{x_i)) 
i=i i=i 

Y Xj ■ f{x-i) + h{f{x_i)) >Yxr fix) + h{f{x)) 
j¥=i j¥=i 

We apply the MIDR condition to x, for the first inequality, and to x^i, for the second inequality. Summing 
up the two inequalities, we obtain that Xi ■ f{x) > Xi ■ f{x-i), i.e., the participation condition. □ 

A.5 Continuous Allocation Rules with Participation: The Proof of Lemma l2^ 

Recall that for any valuation profile x, fhe probabilify disfribufion of a sfrongly anonymous allocation rule 
/ depends only on fhe weighl vector m(a;) of fhe oufcomes. Hence, we fix a pair of arbifrary weighf vecfors 
w,v ^ I^>o- For ^iry a G (0,1), since / satisfies participation, we have fhaf 

(1 — a)w ■ f{av -h (1 — a)w) > (1 — a)w ■ f{av) 
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Using that a / 1 and scale invariance, i.e., that f{av) = f{v), we obtain that 

w • f{av + (1 — a)w) > w ■ f{v) 

This holds for every a E (0,1). Thus, taking the limit as a goes to 0 and using the hypothesis that / is 
continuous, we get that for all weight vectors w, v 

w ■ f{w) > w ■ f{v) 

We can now define Z as the image set of /, i.e., Z = {z j 3v such that 2 : = f(v)}. Using the previous 
inequality, we obtain that for all weight vectors w and all z G Z, w ■ f{w) > w ■ z. Since f{w) £ Z, a 
necessary condition for / to satisfy participation is that f{w) = argmax^^^ w ■ z. □ 


A.6 The Proof of Lemma l3^ 

Since F is robust, for any agent i, for any valuation pair Xi and yi and for all reported valuations y^i and 
verification vectors s_j. 


F{{y-h Xi), (s_i, 1)) = F{{{yT)-i, Xi), (1,... , 1)) and 
F{{y_i, yi), (s_i, 0)) = F{{yT)-i, (1, • • •, 1)) 

Here, we assume that Xi is i’s true type and yi / Sj is a misreport. Moreover, using that / (i.e., the allocation 
rule induced by F on truthful reports) satisfies e-participation, we have that: 

Xi ■ F{{{yT)-i, Xi), (1,... , 1)) > eaji • F{{yT)-i, (1, • • •, 1)) 

Combining the three equations above, we obtain that 

Xi ■ F{{y_i,Xi), (s_j, 1 )) > exi ■ F{{y_i,yi), (s_i,0), 


i.e., that the mechanism with verification F is e-truthful. □ 

A.7 fc-Facility Location: Minimizing the Maximum Cost 

We first introduce some pieces of notation and terminology that we need for this section and for Section IAT^ 
For fc-Facility Location problems, we consider an underlying metric space (M, d), where M is a finite set 
of points and d : M x M ^ M>o is a distance function, which is non-negative, symmetric, and satisfies the 
triangle inequality. For each t £ M and M' C M, we let d{t, M') = min{d(f, t') : t' £ M'}. 

The outcomes are all subsets of k locations in M, i.e., all C C M with \C\ = k. Each agent i has a 
preferred location ti £ M and her “valuation” for outcome C is Xi{C) = —d{ti, C), i.e., minus the distance 
of her preferred location to the nearest facility in C. The minus sign is due to the cost minimization nature 
of the problem. So, each agent i aims at minimizing d{ti, C). 

A (possibly randomized) mechanism F takes as input a profile z = {z\,... , Zn) of reported location^ 
Using oracle access to a verification vector s, the mechanism F maps 2 : to a set C C M of A: facilities. The 
cost of each agent i is the expected distance of her true location ti to the nearest facility in C. For clarity, we 
denote i’s expected cost as cost[fi, F{z, s)] = [d(U, C)], which agent i seeks to minimize. 

Note that in Facility Location, each agent declares an “ohservable” type, namely, her preferred location, to the mechanism and 
not her entire valuation / cost function, as she does in the utilitarian voting domain. The mechanism deduces her cost function 
based on her reported “observable” type. 
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Mechanism 3 The Greedy Mechanism G{z, s) for /c-Facility Location 
L t— 0 ; Pick the first agent i £ z and let C ■(— {zj} 
while |C| < A; do 

i £- arg maxjg^; d{zi,C) 

C ^CU {zi} 
for all Zi £ C do 

if ver(z) ^ 1 then L t— L U {z} 
if L / 0 then return G{z-i, S-l) 
else return C 


The main properties (e.g., truthfulness, robustness, approximation ratio) of a Facility Location mecha¬ 
nism with verification are defined as in Sections [2] and [3l wifh fhe only difference fhaf fhe agenfs now seek 
fo minimize fheir cosfs. E.g., a mechanism wifh verification F is frufhful if for any agenf i, for any locafion 
pair ti and Zi, and for all reporfed locations z^i and verificafion vectors s_j, 

cost[fi, F((z_i, ti), (s_i, 1))] < cost[fi, F{{z_i, Zi), (s_j, 0))] 

In fhis section, we focus on minimizing maxi£]^{d(ti, F(t, 1))}, i.e., fhe maximum disfance of any 
agenf fo fhe nearesf facilify. The Greedy mechanism (or G, for brevify, see Mechanism O is a frufhful and 
robusf exfension of fhe 2-approximafe Greedy algorifhm for A:-Cenfer (see e.g., ll^ Secfion 2.2]). In fhe 
descripfion of Greedy, we write i £ z to denofe fhaf fhe reporfed locafion of agenf i parficipafes in fhe 
locafion profile z. Also, we assume fhaf ties are broken in some fixed deterministic way. We nexf prove 
Theorem 14.11 sfafed in Secfion HI 

Proof (ofTheorem \4.1\l . Clearly, Ver(G) = k, since if all agenfs are frufhful. Greedy verifies only fhe agenfs 
allocafed a facilify. Moreover, fhe approximation rafio of Greedy is 2 (see e.g., |[^ Theorem 2.3]). 

By Lemma [T2l fo show fhaf Greedy is frufhful, if suffices fo show fhaf Greedy is robusf and safisfies 
parficipafion. As for fhe laffer, we fix an agenf i wifh frue locafion ti and a locafion profile z_j. If ti is 
allocated a facilify in (z_i,fj), z’s cosf is 0. Ofherwise, excluding ti from {z-i,ti) does nof affecf fhe 
execution of Greedy and z’s cosf is fhe same in (z_j, ti) and in z_j. 

By Lemma im robusfness follows from fhe obliviousness of Greedy, since Greedy is a recursive mecha¬ 
nism wifh verificafion. As for obliviousness, lef us assume fhaf all agenfs in G are frufhful. Then, for any sef 
L, wifh C n L = 0, fhe oufcome of Greedy on bofh z and z^l is G. In words, if all agenfs in C are frufhful, 
the agents not in C do not affect the outcome of Greedy. Therefore, Greedy is oblivious and robust. □ 

A.8 fc-Facility Location: Minimizing the Social Cost 

In this section, we focus on minimizing ^))’ i-®’ distance of the agents to the nearest 

facility of the mechanism. One may regard this version of A:-Facility Location as a welfare maximization 
problem but with negative valuations. 

Mechanism |4] (or P, for brevity) is a truthful and robust extension of the Proportional mechanism ll22l . 
which achieves an approximation ratio of 0(ln k) for the objective of social cost |[3|. Mechanism|4]is essen¬ 
tially a randomized version of Mechanism[3l We next prove Theorem l4.21 stated in SectionlH 

Proof (ofTheorem \4.2\l . The approximation ratio of Mechanism |4] is shown in 131 Theorem 5.1]. Moreover, 
Ver(P) = k, since if all agents report truthfully. Proportional verifies only fhe agenfs allocafed a facilify. 
By Lemma 13.21 if suffices fo show fhaf Proportional is robusf and safisfies parficipafion. The proof is a 
generalization of fhe proof of Theorem 14. II 
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Mechanism 4 The Proportional Mechanism P{z, s) for fc-Facility Location 
L 0 ; Pick an agent i £ z uniformly at random and let C ■<— {zi} 
while I Cl < A; do 

pick an agent i £ z with probability d{zi, C )/ XljGz 
C ^Cu{zi} 
for all Zi £ C do 

if ver(z) ^ 1 then L ^ LVJ {z} 
if L / 0 then return P{z-l, S-l) 
else return C 


By Lemma im robustness follows from the obliviousness of Proportional, since Proportional is a recur¬ 
sive mechanism with verification. The obliviousness of Proportional was first observed in ITSll . Since our 
setting is different, we include a proof here for completeness. So, we next show that for all location profiles 
2 : and verification vectors s, wifh L = N \ T{s), and all oufcomes C, 

Fv[P{z, s) = C|CnL = 0]= Ft[P{z_l, 1 ) = C] (5) 


which implies fhaf Proportional is oblivious (note also fhaf any possible C ^ T{s) has probabilify 0). To 
esfablish (l5]l, we observe fhaf conditional on fhe even! fhaf no misreporfing agenf is selecfed in C by P{z, s), 
fhe probabilify disfribufion of P{z, s) is identical to fhe probabilify disfribufion of P{z-i, 1). This claim is 
shown by induction on fhe number of selected agenfs and a simple coupling argumenf. To fhis end, lef us fix 
a location profile 2 : and fhe sef L of misreporfing agenfs in z. The firsf agenf is selecfed uniformly af random 
from N\L bofh by P(z, s), conditional on fhe evenf fhaf fhe selecfed agenf is nof in L, and by P{z-i, 1). 
Assume inductively fhaf bofh executions P{z, s), conditional on C H L = 0, and P{z-l, 1) agree on fhe 
selecfed sef C up fo some poinf. Then, fhe nexf agenf in C is selecfed by bofh execufions from exacfly 
fhe same probabilify disfribufion, since due fo fhe conditioning, P{z, s) does nof consider any agenfs in L. 
Finally, since fhe sef C of A: agenfs selecfed by bofh execufions does nof include any agenfs from L, bofh 
execufions resulf in C wifh identical probabilify. 

We nexf show fhaf Mechanism |4] satisfies participation. We fix an agenf i wifh locafion ti and a location 
profile t_j. Since participation is a properly of fhe allocation rule, we assume fhaf all agenfs are Irulhful and 
completely ignore verification from fhis poinf on. So, we simply write P{t), instead of P{t, s). 

For each round £ = 0,1,..., A:, we lef cost[ij, P(t)|C£] be fhe expected cosl of i af fhe end of fhe P, 
given fhaf fhe facility sef of P(t) af fhe end of round £ is C^. Similarly, we lef cost[ti, P{t-i)\Ci] be fhe 
expected cosl of i af fhe end of fhe P(t_j), given fhaf i does nof participate in fhe mechanism and fhaf fhe 
facilify sef of P af fhe end of round £ is Ci. 

For £ = k, cost[ti, P(t)\Ck] = cost[tj, P(t_j)|C'fc] = d(ti, Ck)- For each round £ = 1,..., A: — 1, if z 
participates in fhe mechanism, wifh probability proportional to d{ti, C() fhe nexf facility is placed af ti, in 
which case z’s cosl is 0, while for each agenf j ^ i, wifh probability proporlional fo d{tj , Ci) fhe nexf facility 
is placed af tj, in which case fhe expected cosl of z is cost[ti, P{t)\C£ U {ty}]. Therefore, fhe expected cosl 
of z is: 


cost[ti,P(t)|Q] 


d{tj,Ci) cost[ti, P{t)\Ci U {ty}] 

d{ti, Ci) + Yljj^i d{tj, Ci) 


( 6 ) 


For £ = 0, fhe expected cosl of agenf z is: 


cost[ij, P{t)] 


Hj^i cost[f^,P(t)|{ty}] 
n 


(V) 
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If i does not participate in the mechanism, her expected cost for £ = 1,..., fc is: 


cost[ti, P{t_i)\C£] = 


Y^j^i d{tj, Cl) cost[fi, P{t_i)\Ci U {tj}] 


Y,^^d{h,Cl) 

If i does not participate in the mechanism, her expected cost for £ = 0 is: 

Yj^i COSt[fi,P(f_i)|{fj}] 


COSt[fi,P(f_i)] = 


n — 1 


Using induction on £, we next show that for any round £ = 0,1,..., /c and any set Ci, 


(8) 


(9) 


cost[U, P(f)|C'f] < cost[ti, P{t-i)\Ci] 


( 10 ) 


Clearly, (flOl) implies that P (Mechanism lUl satisfies participation. 

For the basis of the induction, we observe that (fTOl) holds trivially for £ = k. We inductively assume that 
(fTOl ) holds for ^ + 1 and any facility set and show that (fTOl ) holds for £ and any facility set Q. If £ > 1, 
we use ([S]) and obtain that: 


cost[ti, P{t_i)\Ci] = 


> 


Yj^i d{tj,Ci) cost[U, P{t_i)\Ct U {tj}] 
d{tj, Cl) 

Yjjti d{tj,Ci) cost[ti, P{t)\Ci U {fj}] 


d{ti,Ci) + Yj^id{tj-,Ci) 


= cost[ti, P{t)\Ci] 


The inequality follows from the induction hypothesis and that d{ti,Ci) > 0. The second equality is 
If £ = 0, we use ([Hi and obtain that: 


cost[fi,P(t_i)] = 
> 


Yjjli COSt[ti,P{t_i)\{tj}] 
n — 1 

Yj^i cost[U,P(t)|{fj}] 


n 


= cost[U, P{t)] 


The inequality follows from the induction hypothesis and the fact that n > n — 1. The second equality is 
([71). Thus we have established (ITOl) for any round £ = 0,1,..., k, and any facility set Ci. 

To conclude the proof of Theorem l4.21 we observe that since P is robust and satisfies parficipafion, if is 
also Irulhful, by Lemma lT2l □ 


A.9 The Proof of Theorem 15.11 

We esfablish fhe properties of Pow^ for any £ > 0. To obfain Theorem 15.11 we sef £ = In m/e. 

If all agenfs are frulhful, Pow^ picks an oufcome j and a fuple t G and refurns j afler verifying all 
agenfs in f. Since fhere are af mosf £ differenf agenf indices in f, fhe verificalion of Pow^ is af mosf £. 

Due fo ifs proportional nafure, Pow^ is oblivious fo fhe declarations of misreporting agenfs nof verified 
(see also fhe proof of obliviousness for Proportional, in Secfion IA.8I) . Specifically, we show fhaf for all 
valuafion profiles x and verificalion vectors s, wilh L = N \ T{s), and all oulcomes j, 

Pr[Pow^(£C, s) = y I V{x) n L = 0] = Pr[Pow^(®_i, 1 ) = j] (11) 

Therefore, Pow^ is oblivious. Since if is also recursive. Lemma ITT] implies lhal Pow^ is robusl. 

To prove ([TTI) . we observe lhal for any oufcome j, fhe condition U(£c) n L = 0 implies lhal Pow^(£c, s) 
selecls only ferms Xti{j)xt 2 {j) ■ ■ ■ xt^{j) wilh Irulhful agenfs in T{s). Every ferm wilh some valuation 
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Xf (j) of a misreporting agent f' G L is excluded, since V(x) n L = 0 implies that t G T{sY. Therefore, for 
any outcome j, Pow^{x, s), conditional on V (x) n L = 0, and Pow^{x-l, 1) have exactly the same set of 
“allowable” terms from which they select xt^{j)xt 2 {j) ■ ■ ■ xt^{j) and t. In both, each such term is selected 
with probability proportional to its value. Taking all outcomes into account, we obtain that the distribution 
of Pow^(®, s), conditional on V(x) n L = 0, and the distribution of Pow^{x-l, 1) are identical. 

We next establish the approximation ratio of Pow^ for the objective of maximizing the social welfare. 
The intuition is that as £ increases from 0 to oo, the probability distribution of Pow^ sharpens from the 
uniform allocation, where each outcome is selected with probability 1/m, to the optimal allocation. The 
rate of this transition determines the approximation ratio and is quantified by the following. 

Lemma A.l. For any i >0, Pow^ is -approximate for the social welfare. 

Proof Let us fix any valuafion profile x and lef w = w{x) be fhe oufcome weighfs in x. For fhe approxima- 
fion rafio, we can assume fhaf all agenfs are frufhful. So, we lef Pow^(tu) = Pow^(a;, 1), for convenience. 

The opfimal social welfare is ||m||cxD. The expecfed social welfare of fhe mechanism is w ■ Pow^(tu) = 
\w^^^\/\w^\. So fhe approximation rafio of Pow^ is equal fo: 

^ ^ f Mm V ll'»^ll£+i 

|ru^| ||m||oo (llmll^)^ ||ru||oo V J ll'»"lloo 

Using fhaf ||m||oo < ||m||£_|_i and fhaf ||iu||£ < m^'^”||m||£_|_i, we obfain thaf fhe 
approximation rafio of Pow^ is af leasf □ 


Unforfunafely, Power does nof safisfy parficipafion. For a simple example, lef m = 2 and n = 2 and 
lef xi = (1,0) and X 2 = (3/4,1/4). Then, agenf 2 prefers oufcome 1, buf her parficipafion decreases ifs 
probabilify from 1, when agenf 1 is alone, fo somefhing less fhan 1, when bofh agenfs parficipafe. 

However, Power satisfies parficipafion approximafely. To prove fhis, we use fhe facf fhaf fhe Partial 
Power allocation (see Section [8ll is MIDR, by definition, and essenfially a slighfly “curved” version of 
Power. Using fhaf fhe probabilifies fhaf each oufcome is selecfed in Partial Power and in Power are close 
fo each ofher and fhe facf fhaf Parfial Power satisfies parficipafion, we obfain fhe following. Since Pow^ is 
robusf and satisfies m“^/^^^^^-parficipation. Lemma lT2] implies fhaf Pow^ is m^^/^^^+^^-fruthful. 

Lemma A.2. For any f' > 0, Pow^ satisfies -participation. 


Proof. Lef us fix any valuafion profile x and lef w = w(x) be fhe oufcome weighfs in x. Since parfici¬ 
pafion is a property of fhe allocafion rule, we can assume wlog. fhaf all agenfs are frufhful in x. So, we lef 
Pow^(tu) = Pow^(a;, 1), for convenience. 

We need fo show fhaf for any agenf i, her expecfed ufilify wrf. fhe probabilify disfribufion of Pow^(iu) 
is no less fhan times her expecfed ufilify wrf. fhe probabilify disfribufion of Pow^(m_j). Since 

Pow^(tu) selecfs each oufcome j wifh probabilify wy\w% we need fo show fhaf for any agenf z. 


1 Xi ■ W Xi ■ w ■ 

m^ > 


\W' 


i| - 


\w 


In Secfion IA.151 Lemma IA.51 we consider fhe Partial Power allocafion wifh paramefer £ (and wifh 
1 — l/r = l) and show fhaf if is MIDR wifh range Zi = {2 G M>o : ll^l|i+i/£ < i/(^+i)| and function 

h{z) = 0. Therefore, by Lemma l2Tl Partial Power satisfies parficipafion. To esfablish fhaf Pow^ satisfies 
parficipafion, we observe fhaf Parfial Power wifh paramefer £ is essenfially a slighfly “curved” version of 
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Pow^, where each outcome j is selected with probability ’ instead of wy\w^\ in Pow^. 

Using the fact that Partial Power satisfies participation, we obtain that for any agent i, 

p p 

Xi ■ ^ Xi ■ w_- 

\\w%+i - lirnijil+i 

Since for any m-dimensional vector y, \y\ > ||y||i+i/£ > \y\, we have that 

^ Xi - Xi - Xi - rnl,- Xi - mi,- 

mP+i — - > — -> —^- — > — - - 

\'^\ Jill J 

I I II ii-L-r ^ II —I —L\ 

Thus, Pow^ satisfies m“^/(^+^)-parficipafion. □ 

A.IO A Detailed Proof of Theorem 16.1 1 

In this section, we give a detailed proof of Theorem 16.11 from scratch, for completeness and clarity. Recall 
that the proof describes a random family of instances where any strongly anonymous truthful mechanism 
needs to verify a logarithmic number of agents in expectation. 

To define such instances, we consider m outcomes and m disjoint groups of agents. Each group has a 
large number v of agents. An agent in group j has valuation 0 for any outcome other than j and valuation 
either 1 or <5 for outcome j, where 5 > 0 is extremely small (e.g., 5 = 1/v^^). In each group j, the probability 
that exactly k, 0 < k < v, agents have valuation 1 for outcome j is 

The expected total valuation of each outcome is essentially 1, since v is very large and vS is negligible. 
The probability that a group j has at least logm agents with valuation 1 is 2“*°®™ = 1/m. Hence, the 
probability that some group has at least logm agents with valuation 1 is 1 — (1 — 1/m)™ > 1 — exp(—1). 
A similar analysis shows that the probability that some group has more than 2 log m agents with valuation 
1 is at most 1/m. Therefore, the expected maximum social welfare of such instances is 0(logm). In fact, 
one can show that a random instance has maximum social welfare 0(log m) with high probability. 

We next consider any truthful mechanism F with expected social welfare of f7(log m) for such instances 
and show that F needs to verify a logarithmic number of agents. To this end, we focus on a group j of 
agents and fix x^j, i.e., fhe declarations of the agents in all other groups. Now we can assume wlog. that 
the probability of outcome j depends only on the number of agents in group j that declare valuation 1 for 
outcome j. To see that this is indeed wlog., we first observe that the number of agents that declare 1 for j 
fully determines the number of agents that declare 6 for j. Moreover, if the probability of outcome j depends 
on the identities of the agents that declare 1, then we could randomly permute the agents in group j (and in 
all other groups) before running the mechanism F. This would lead to an anonymous mechanism with the 
same approximation and verification guarantees. Thus wlog. for any fixed x^j, F should induce a sequence 
of probabilities po,pi,... ,pk, - - -, where pk is fhe probability of outcome j, given that the number of agents 
that declare valuation 1 for outcome j is k. Since the mechanism F is truthful, if k agents declare valuation 
1 for outcome j, we need to verify each of them with probability at least pk — Pk-i- To see this, observe 
that the expected utility of an agent with valuation 5 for outcome j is Pk-i5, if she is truthful, and at least 
Pk5 times the probability that she is not verified, if she is not truthful and declares 1. Since the former is no 
less than the later (and since p^ G [0,1]), F needs to verify any agent that declares 1 for j with probability 
at least pk — Pk-i- In words, verifying each agent that declares 1 for outcome j with probability at least 
Pk — Pk-i is a sufficient condition for truthfulness. 

Therefore, for any fixed x^j, when k agents declare 1 for outcome j, we need an expected verification 
of at least k{pk — Pk-i) only for agents in group j. Assuming truthful reporting and taking the expectation 
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over the number of agents in group j with valuation 1, we obtain that an expected verification of: 

U V 

Y, - Vk-i) > ^ - (A: + l)/2) 

k=0 k=0 

k=0 k=0 

= E[welfarej | a;_j]/2 — Pr [outcome j | a;_j]/2 

Note that the last equality ignores a negligible term of at most ^5. Hence, the expected verification for agents 
in group j is at least half the expected social welfare of the mechanism from group j, conditional on x^j, 
minus half the probability of outcome j in F, conditional on x^j. 

Removing the conditioning on x_j and summing up over all groups j, we obtain that the expected 
verification is at least E [welfare] /2—1 /2 (with expectations taken over the random choices of the mechanism 
and over the random instances). Since such instances have a maximum social welfare of 0(log m) with high 
probability and since the mechanism achieves a constant approximation ratio, the mechanism F on a random 
instance requires an expected verification of 17 (log m) (the expectation is taken over the random choices of 
the mechanism) with high probability (the high probability refers to the selection of the instance). □ 

Remark A.l. In the proof of Theorem 16.11 we assume for simplicity that u is large and S is tiny, so that 1/6 is 
negligible. In fact, it suffices to use i/ = log m/e, for some small enough constant e > 0, and 6 = 1/ log m. 
The proof is essentially identical, only the final calculations change. However, since now the total number 
of agents is n = m log m/e, and log n = ©(log m), we obtain that even if verification is quantified wrt. the 
number n of agents, we still need logarithmic verification. 

A.ll Lower Bound on Truthful Mechanisms without Verification 

In this section we see that any truthful mechanism without verification achieves the same social welfare as 
the constant uniform allocation rule. This demonstrates the importance and the quality of our results in a 
fully general setting such as utilitarian voting. The following theorem is true even for partial allocation rules 
which means that even this opportunity without verification is useless. 

Theorem A.l. Any randomized truthful mechanism without money and without verification (full or partial 
allocation) has approximation ratio to the optimal social welfare at most m~^ if we have large enough 
number of agents. 

Proof Let / be a truthful allocation rule. Consider the instance where we have m different outcomes and 
m single-minded agents. Each agent i has valuation one for the outcome i (i.e. xfii) = 1) and zero for the 
others (i.e. xfij) = 0 for j / i). Let pi be the probability of the outcome i in this instance according to 
/ (i.e. Pi = fi{x)) and let j = argminjpj. Since YliPi < 1 we have that pj < m~^. Lets assume now 
that the valuation of agent j for the outcome j increases and all the other valuations remain the same. We 
definepj(xj(j)) = fj{x-j,Xj), where Xj = (0,... ,0,Xj(j),0,... ,0). Since / is truthful we have thatpj 
should be non decreasing function of Xj (j) otherwise / does not satisfy monotonicity and therefore is not 
truthfully implementable even with monetary transfers [2!]. We prove that pj(xj(j)) is a constant function 
as Xj(j) increases. Lets assume the opposite, then there exists an L > 1 such that Pj{L) > pj, because pj is 
non decreasing. Then agent j has more expected utility if he reports L instead of his real valuation which is 
1 and so / is not truthful. Therefore pj{xj{j)) = pj for all Xj{j). Now consider the same instance as before 
with the difference that Xj{j) is much larger. The optimal social welfare is Xj(j) whereas / gets welfare 
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at most 1 + Xj{j) ■ m ^ where the first term comes from the total valuation of all the agents but j and the 
second term from the fact that pj < m~^. Finally the approximation ratio of / as Xj{j) goes to infinity is 


lim 

Xj{j)^CXl 


1 + Xj{j) ■ m ^ 


XjU) 


= m 


-1 


□ 

We notice that an approximation ratio of m~^ is achievable by the mechanism that select an outcome 
uniformly at random without taking into account the valuations of the agent. So the uniform mechanism is 
worst-case optimal for truthfully maximizing welfare without money in the utilitarian voting setting. 

A.12 Truthfulness and Low Verification Imply Continuity: The Proof of Lemma ITAI 

Since all our mechanisms and allocation rules are strongly anonymous, throughout this section, we refer to 
strongly anonymous and scale invariant mechanisms / rules just as scale invariant mechanisms / rules, for 
simplicity and brevity. Moreover, since we focus on strongly anonymous mechanisms / allocation rules, we 
always consider the weight vector w{x) = x of the outcomes induced by a valuation profile x, instead of 
fhe valuafion profile x. 

Before we sfarf wifh fhe proof, we observe fhaf, by scale invariance, any allocation rule / cannof be 
continuous af 0 , since fhis would imply fhaf / is a consfanf allocafion fhaf does nol depend on fhe inpuf (fo 
see fhis, sfarf from any weighf vector w and choose an scaling facfor a fhaf fends fo 0). For fhis and for 
similar technical reasons, in fhis and in fhe following secfions, we resfricf our affenfion fo weighf vecfors 
w wifh stricfly positive value in each coordinate. Thus, we lef M_|_ = {x G M : x > 0} and focus on 
mechanisms / allocafion rules resfricfed to fhe domain M™. Moreover, we prove some of our resulfs for fhe 
general case fhaf fhe image sef of fhe mechanism / allocation rule is nol resfricfed fo fhe simplex A{0), buf 
if is fhe more general M™. 

Before fhe proof of Lemma ITTl we recall fhe definifion of confinuify of a real mulfivariable function. A 
function / : ^ is continuous if for every w G 

lim f{v) = f{w) 

V^W 

Moreover, given a vector w G M™, a mulfisef p = {r;i,..., Vn}, wifh each vi G M+, is called a partition 
of ru if ru = Ylv-ep P{w) denote fhe sef of all possible partitions of a vector w. 

Proof (of Lemma \7. Ik We firsl show fhaf if / has a disconfinuify, fhere are f7(n) agenfs fhaf have a very 
small valuafion <5 > 0 and can change fhe allocation by a consfanf faclor, independenl of n and <5. 

To fhis end, we lef w be fhe poinl of disconfinuify of /. So lim f{v) eifher does nol exisl or if is 

V^W 

differenl from f{w). In bolh cases, by fhe definition of confinuify, fhere exisls an e > 0 such fhaf for every 
5 > 0 fhere is a poinl vs such fhaf — m| < <5 and \f{vs) — /(tu)| > e. 

Claim. For every <5 > 0, fhere is a vg wifh fhe above properties and vs < w. 

Proof (of the claim). Lef C = min^ Wj and D = maxj Wj. Then we lake a vs' wifh 6' < D6/{m{C + D)). 
Now we define z = v^i/(1 + ^).\f {vs')j < Wj, Ihen Zj < Wj. On fhe olher hand, if {vs')j > Wj, Ihen, 
since w G K™ and Wj / 0, 


Mj 


Wj < 6' ^ 


1 + 6'/wj 


< Wj, 


buf 


^ _ Mj 
^ l + S'/C 


< 


Mj 

1 + 6'/wj 


^ Zj < Wj 


22 






Now we bound | 2 : — i(;|. If {y 5 ')j > wj then Wj — zj < wj — wj/ (^1 + = Wj Otherwise, 

by the definition of {vsi)j we have that {vs')j > wj — 5' and therefore wj — Zj < Wj — {wj — 5')/ 

Hence, in any case, we have that 


Wj - Zj < Wj 


C + 5' 

After summing up for all j, we get 

\w — z\ < m5' 


+ 5' 


C 


C + 6' 


< D 


C + 5' 


+ 5' 


C 


C + 5' 


D + C 
C + 5' 


< m 


D + C 
C 


5' <5, 


where the last inequality follows from the definition of 5'. Now, since / is scale invariant, we know that 
f{vs') = f{z). Therefore, \f{z) - f{w)\ > e and [z — m| +5 and z + w. Since we can do so for every 
(5 > 0 , we have found the required vs = z. □ 


Now since \ f{vs) — f{w)\ > e there exists j E [m] such that fore = e/mwehave \fj{w) — fj{vs)\ > e. 
This means that either fj{w) — fj{vs) > e or fj{vs) — fj{w) > e. 

Assume fj{w) — fj{vs) > £. Then, fj{w) / 0. Let Ps = w — vs, we have that \P^\ < 5 and /35 > 0 
because of the claim and therefore can be the valuation vector of an agent. Also let B = maxj {P 5 )j and 
zs = Ps + where Sj is the unit vector to the direction j. 

Now let a = 1 — Then, because of the discontinuity, we have that fj{w) — fj{vp > e. Therefore. 


where a is independent of 5. We let now 

k = min < 
j:{zs)j>Q 

We consider the following partition of m: p = {zg, ■ ■ ■, So, we have k agents with valuation zs- 

k times 

Next, we observe that any of these k agents can significantly (and profitably) change the probability 
distribution of / by a slight deviation from her true valuation. Therefore, any truthful extension F of / must 
verify each of these k agents with a probability at least C, due to truthfulness, where ^ is a constant that does 
not depend on k and <5. Therefore, the expected verihcation of F is at least linear in the number of agents. 

Specihcally, let us assume that one of these k agents i has true valuation 5ej, where Sj is the unit vector 
with a single 1 in its j-th coordinate. Then, she prefers f{w) to f{vpj. So, if in this instance, the mechanism 
F does not verify her, she will misreport zs instead of 5ej to get f{w). So, for each agent i, we let 

Wi = Pr[F verihes i when reported valuations are as in p] 


fjjvs) 

Iji-w) 


< a 


( 12 ) 


Wn 




and = Wj — k ■ {zpj 


Then, if the true valuation of the agent i is 5ej and she reports zs, while all other agents report truthfully, 
the utility of i is at least 5 • (1 — vrp ■ fj{w). For this lower bound on Ts utility, we assume that if F verihes 
i, agent i gets utility 0. On the other hand, if agent i reports her true valuation 5ej, she gets utility 5fj{vg). 
But since F is truthful, we have that 

(5 • (1 - vn) • fj{w) < 5 • fj{vs) ^ (1 - vn) < (l - vrP <a^l-a<vri 
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Since a < 1, by definition, we let C = 1 — a. Hence, Wi > C, and is a positive constant that does not 
depend on b. Therefore the expected verification of F is 


EVer(F) = '^vri>k-C = = Q{l/5) 

i 


We note that this holds for any <5 > 0 and that the number of agents n can be arbitrary large. 

Next, we consider the case where fj{vs) — fj{w) > e. We define (3^, B as before. Also, we let L = 
||/('ii’)||cx) and zs = {2/e)mLBej. The intuition and the basic steps of the proof are very similar to those 
of the proof above. However, the technical details are different, we present the detailed argument below. 

We assume, for simplicity, that fj{w) > 0 and let a = 1 + (we also derive below a similar lower 
bound on the verification probability for the case where fj{w) = 0). Then, because of the discontinuity of 
/, we have that fj{vs) — fj{w) > e. Therefore, 


where a is independent of 5. Now, we let 


fjjvs) 

fj{w) 


> a , 


(13) 


k = 



> 

Wj-6 

.i^s)j_ 


{2/£)mLB 


= Q{l/5) 


For the last equality, we use that e, m, L, B are independent of (5. We also let jj = {vs)j — k{zs)j. Then, 
we consider the following partition of vs: p = {zs ,..., 2 : 5 , 7 }. So, we have k agents with valuation zs- 


k times 


Let us assume that one of these agents i has true valuation fis + {2/e)mLBej. Then, i prefers f{w) to 
f{vs) because the j-th coordinate of her valuation dominates the others. So, if in this instance, the mecha¬ 
nism F does not verify her, agent i would report zg, instead of + {2/e)mLBej, in order to get f{w). So, 
using our definition of the verification probability vri, if the true valuation of the agent i is f3g+{2/e)mLBej 
and all other agents report truthfully, the utility of agent i is at least {2/e)mLB ■ (1 — vri) • Iji^g). For 
this lower bound on Ts utility, we assume that if F verifies i, agent i gets utility 0. If the agent i reports 
truthfully, she gets utility 


+ {2/e)mLBfj{w) < mLB + {2/e)mLBfj{w), 

i 

where the inequality follows from the definition of B and L. But since F is truthful, we have that 


{2/£)mLB ■ (1 — vvi) ■ fj{vg) < mLB + {2/e)mLBfj{w) 

^ 2 , . 1 


^ ^ • (1 - vri) ■ fj{vg) < 1 + ^ • fj{w) 

2,^1 2 £ 

- • (a - 1) - < a vvi 

£ fj{w) 


(1 - vn) a< , , , 
e fj{w) 


2 

e 


1 


< a vri 


1 


< vrj 


e fj{w) fj{w) fj{w) + £ 

The last implications follow from calculations that use the definition of a. We let ^ = ^/{fji'^) + e)- 
Thus, vri > C C is a positive constant that does not depend on 6. 

In case where fj{w) = 0, the truthfulness condition becomes 


(1 - vri){2£)mLBfj{vg) < mLB ^ (1 - vri){2/£)fj{vg) <1^ vri> 1/2 

The last implication above follows from the fact that fj{vg) — fj{w) > e => fj{vg) > £. So, in this case, 
we let C = 1/2. As before, the expected verification of F is 


EVer(F) = '^vri>k-Q = Q{n) = Q{l/5) 
i 

Note that this holds for any 6 and that the number of agents n can be arbitrary large. □ 
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A.13 Continuity Implies Participation 


In this section, we show that participation is a necessary condition for any continuous scale invariant and 
strongly anonymous full allocation rule / that can be extended to a truthful mechanism F with selective 
verification. By Lemma 17.11 this also holds for any scale invariant and strongly anonymous full allocation 
rule / that can be extended to a truthful mechanism F with selective verification of o(n) agents. 

Lemma A.3. Let f be any continuous scale invariant and strongly anonymous full allocation rule. If f has 
a truthful extension F, then f satisfies participation. 

Proof. We first show that if any agent i declares valuation 0 for all outcomes, the probability distribution of 
the truthful extension F of / is not affected by whether 0 is the true valuation of i or a misreport. To this 
end, we fix the valuation profile a;_j of all other agents and let be the outcome weight vector induced 
by ®_i. We next show that for any agent i, 

F((®_„0),(l_i,l)) =F((®_i,0),(l_„0)) (14) 

Let us assume that F{{x-i, 0), (l-j, 1)) / F{{x-i, 0), (1-i, 0)). Then, since / achieves full allocation, 
|F((a;_j, 0), (l_i, 1))| = 1 and |F((a;_i, 0), (l_j, 0))| = 1. Therefore, there is an outcome j such that 
Fj((®-i,0),(l_i,0)) > Fj{{x_i,0),{l_i,l)). Let 7 = 0), (!_*, 0)) - 0), (l_i, 1)) 

be the difference in the probability of outcome j in F when 0 is a misreport of agent i and when agent i 
truthfully declares 0. 

Let Bj be the unit vector with a single 1 in its j-th coordinate. Since F is an extension of / and since / is 
strongly anonymous, (i) F{{x-i, 0), (1-i, 1)) = f{w-i ); and (ii) for any h > 0, F{{x-i, hej), (l_i, 1)) = 
f{w-i + hej). Since / is continuous, 

lim f{w_i + hef = f{w_i) = F{{x_i, 0), (l_i, 1)) 

ti—i>0 

Intuitively, the continuity of / implies that (5ej), (l_j, 1)) « Fj((a;_j, 0), (l_i, 1)), if 5 is 

small enough. Moreover, truthfulness implies that Fj((a;_j, 5ej), (l_j, 1)) > Fj((a;_j, 0), (l_i, 0)). But 
these contradict our assumption that Fjfx^i, 0), (1-i, 0)) > Fj{{x-i, 0), (1-i, 1)). Thus, we obtain (fTdl) . 

Let us now formalize the intuition above. By continuity, there are an e € (0,7) and a <5 > 0 such that 

+ SBj) - /(m_i)| < e ^ \F{{x_i, 6ej), (!_*, 1)) - F{{x_i, 0), (!_*, 1))| < e 

This implies that \Fj{{x-i,6ej), (l_i, 1)) — Fj{{x-i,0), (l_i, 1))| < e < 7. Therefore, by the definition 
of 7, we obtain that 

Fj((a;_i,0), (l_i,0)) > Fj{{x_i,6ej),{l_i,l)) (15) 

Applying truthfulness when agent i has true valuation 6ej, we obtain that 


dBj ■ F{{x_i, 6ej), (l_i, 1)) > 6ej ■ F{{x_i, 0), (1-*, 0)) 

Since (5 > 0, we get that Fj{{x-i,5ej), (!_*, 1)) > Fj((a;_j,0), (l_j,0)) which contradicts (fTSl) . So, we 
obtain that (fTdl) holds for any agent i. 

Since F is an extension of / and since / is strongly anonymous, F((a;_j, 0), (l_j, 1)) = /(m_j) 
and F{{x-i,Xi), (l_i, 1)) = f{w-i + Xi), for the valuation Xi of agent i. Using (fldl) . we obtain that 
f{w-i) = F{{x-i, 0), (1-i, 0)). Now, using truthfulness, we conclude that: 

Xi • F{{x_i, Xi), (l_i, 1)) > Xi ■ F{{x_i, 0), (l_i, 0)) ^ Xi ■ f{w_i + Xi) > Xi ■ f{w_i) 

Therefore, / satisfies participation (and thus, F also satisfies participation, since F is an extension of /). □ 
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A.14 Participation implies Discontinuity 

Next, we use Lemmaand prove that if a full allocation rule / is strongly anonymous and scale invariant 
and satisfies participation, then / is either constant (i.e., its allocation is independent of the reported val¬ 
uations) or has a discontinuity at 1. The intuition is that by Lemma 1231 any continuous allocation rule / 
with these properties must satisfy f{w) = arg maX;j.g^(o) w ■ z. But, welfare maximizers over A{0), i.e., 
with full allocation, cannot be continuous (e.g., let m = 2 and consider welfare maximization over the unit 
simplex for weights vectors (1,1 + e) and (1,1 — e)). The proof of the following formalizes this intuition. 

Lemma A.4. Let f be any strongly anonymous and scale invariant full allocation rule that satisfies partic¬ 
ipation. Then, the probability distribution of f is either constant or discontinuous. 

Proof. Let / be a strongly anonymous and scale invariant full allocation rule that satisfies parficipafion and 
is nof consfanf. To reach a confradicfion, we assume fhaf / is also continuous. Then, by Lemma 12.21 fhe 
allocation of / can be regarded as fhe solufion fo an opfimizafion problem where fhe feasible region is given 
by a sef Z and fhe direcfion of fhe objecfive is given by fhe inpuf w to /. Thus / depends only on the 
direction of w, which is expected, due to scale invariance. Since the allocation of / satisfies 
/ is a solufion fo an opfimizafion problem on fhe hyperplane pi : Y2- fj = 1 wifh fhe feasible region 
given by Z and fhe direcfion of fhe objecfive is given by fhe projecfion of w fo fhe hyperplane pi. We 

observe fhaf any vector w can be wriffen as m = Wp^ + where Wp.^ is fhe projection of w fo pi and 

Wni is fhe projecfion of m fo a direcfion perpendicular fo pi, which is fhe direcfion of ni = (1,1,..., 1). 
Therefore, since fhe optimization problem which determines fhe value of / is an optimization problem on 
fhe pi, fhe allocafion of / on inpuf w draends only on fhe direcfion of Wp^. Hence, for any a,b > 0 if 
w' = aWp^ + bwni, then f(w) = /(m'jB 

Now since / is not constant, there exist two points w,v £ such that f{w) / f{v). From the 

discussion above, we have that w = Wp.^ + and that v = Vp^ + v^. We next show that / is left 

discontinuous at the point + Vn^. We take the point w' = aWp.^ + , with o > 0 to be chosen so that 

w' < Wni + ■Uni, which means arup^ < . This is always possible because has the form {r,r,... , r) 

and we can assume wlog. that r > 0, since f{v) depends only on Vp^. Similarly, we define v' = bvp^ +'Uni, 
wifh b > 0 such fhaf v' < + v^. From fhe discussion above, we have fhaf f{w') = f{w) and fhaf 

f{v') = f{v). We now define = ew' + (1 — e){wni + I’m)- It is nof hard fo see fhaf < Wn^ + 
and fhaf lim = Wn, + v^. Moreover, 

= eWp^ + Wni + (1 - e)Vni = eWp^ + CWn^ 

for some c > 0. Therefore, f{Wf,) = f{w') = f{w). In fhe same way, we define vs = 6v' + (1 — 5)(runi + 

■Uni)- Then, we have fhaf vs < 10^ + v^, thaf lim vs = mm + v^, and fhaf f{vs) = f{v') = f{v). 

( 5->-0 

Therefore, 

lini/(m,) = f{w) / f{v) = lim/(u 5 ) 
e-kO 5-i.O 

Hence, fhe limif lim f{y) does nof exisf and / is lefl discontinuous at + v^. In fact, since 

y^{Wrn+Vnfi~ 

f is scale invariant, it is discontinuous at (1,1,... , 1) = a;* = (mm + I’m)/ |mm + I’m |. □ 

A. 15 The Analysis of Partial Power 

In this section, we prove the main properties of the Partial Power allocation rule. Since Partial Power is a 
strongly anonymous allocation rule, we restrict our attention to the weight vector m = w{x) = Y27=i 

^ Formally, this follows from the description of / as an MIDR allocation rule that satisfies f{w) = axgmaxzez w ■ z, by 
Lemma lT^ and from the scale invariance of /. 


26 



the outcomes, instead of the valuation profile x. For some fixed integers r > 1, we let f{w) denote the 
allocation rule: 


/('-’■) (m) 


(1 — 1/r) 


Interestingly, the Partial Power allocation rule bears a resemblance to proper scoring rules in |[T6l . For 
simplicity of notation, whenever we use ||i7||, without an index denoting the order of the norm, we refer to 
the {£ + norm ||r;||i_|_i/£ of vector v. 


Lemma A.5. For all integers £,r > 1, the allocation rule is the solution to the optimization 

problem ■ z, where 

Zi,r = e M >0 : ||2:||i+i/£ < (1 - | 


Proof. The range ,, is smooth and strictly convex. Therefore, the solution to the optimization problem 
max^ez^ ■ z IS, the extreme point p E in the direction of w. This point p satisfies V||p|| = Xw 
for some A E M which may depend on w. Moreover, we observe that V||p|| = (1 + 1/£)p^^^/\\p\\. Hence, 
since p is the extreme point of in the direction of w, we have that p = \w^. Also, since p is a point on 
the boundary of ||p|| = (1 ~ 1 /r)m ~^/which gives the desired closed form for □ 

Lemma Ia 3] and Lemma ITT] imply that the Partial Power allocation rule is MIDR and satisfies partici¬ 
pation. The following provides an upper bound on the approximation ratio of Partial Power. The intuition 
behind the approximation ratio is that due to the definition of the range Zfthe worst case for Partial Power 
happens when w has a single 1 and all other components 0. Then, the maximum social welfare is 1, while 
the expected social welfare of the partial allocation achieved by partial power is ■ 

Lemma A.6. For all integers £,r > 1, the allocation rule achieves an approximation ratio of 

(1 — the social welfare. 


Proof. First, we recall that we use ||m|| to denote the {£ + l)/£-th norm ||m||i_|_i/£ of vector w. The optimal 
social welfare is maxjgo wj = ||ru||oo- Thus, the approximation ratio of is 

w ■ {l — l/r)w-w^ 

Il'iA’Iloo r?T,t/(^+t) ||m||oo||m^|| 

We observe that w ■ ~ . Therefore, 

w ■ w) (1 — 1/r) 

||ru||oo ?7^1/(^+t) ||lu||oo 

Now, we observe that for every f' > 1, 

/ tti 

= f ^ (ruj) ' j 

Therefore the approximation ratio of Partial Power is (1 — . □ 


= ll'»"lk+i > ll^^lloo 

\j€0 J 
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A.16 The Implementation of Partial Power by Mechanism |2] 


The analysis in Section IA.15I focuses on the properties of the Partial Power allocation rule. In this sec¬ 


tion, we establish that the implementation of Partial Power by Mechanism |2] with selective verification is 
robust. Throughout this section, we fix a valuation profile x and a verification vector s. We always write 
PartPow^’^, instead of PartPow^’'’(a;, s), for simplicity. Moreover, we let w = w{x) = denote 

the outcome weight vector induced by x. 

In the next three lemmas, we establish the feasibility of PartPow^’^, for any integers r > 1, by 
showing that whenever PartPow^’'’ results in _L, we can allocate a probability pj each to outcome j so that 
PartPow^’’' is robust. We recall that the probability pj of each outcome j G O is: 


— PrpartPow^’'’ = j \ PartPow^’^’ ^ ±] Pr[PartPow^’'’ ^ L] 


(16) 


Pj 


Pr[PartPow^’^ = ±] 


where T is the set of truthful agents in x. Note that for each outcome j, the probability pj is defined so that 


when the truthful players have weight wt, the unconditional probability of outcome j in PartPow^’^ is 


Pr[PartPow^’^ = j \ PartPow^’’’ / _L] Pr[PartPow^’^ / _L] + pj PrpartPow^’'" = _L] = 

Therefore, with these probabilities pj in the action _L, PartPow^’^ becomes robust. 

To establish that these probabilities are indeed feasible, we show that for all outcomes j, pj > 0, and 
that YljeoPj — non-negativity of pj’s follows rather easily from the fact that excluding some 


misreporting agents from PartPow^’^ can only increase the probability that PartPow^’'’ results in outcome 


j (see also Lemma lA^ . The upper bound on J2jeoPj more difficult to establish. The intuition is that 
the additional verification in steps 1-4 of PartPow^’^ makes the probability that some misreporting agent 
is caught large enough. Then, the required “corrections” in the unconditional probability distribution of 
PartPow^’'’, which are implemented by the probabilities pj, should not be large. Hence, the sum of pj’s can 
be upper bounded by 1 (see also Lemma lA!9l) . 


To simplify the notation, we let ±i denote the case where PartPow^’^ results in _L at step 4, and ±2 for 
the case where PartPow^’'’ results in ± at step 9. Using this notation, we note that the probability of not 
revealing any liars in steps 1-4 is 



Moreover, for the steps 5-10 of PartPow^’^, we have that the probability of outcome j is: 



because outcome j is selected if and only if the term selected in step 6 contains only truthful agents. 


Using these properties, we can show that pj > 0. This is an immediate consequence of the following. 
Lemma A.7. For all integers r > 1 and all outcomes j, 


fj^’^\wT) > Pr[PartPow^’’’ = j \ PartPow^’^’ / ±] Pr[PartPow^’'' / ±] 
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Proof. We observe that the following holds for the probability on the rhs: 


Pr[PartPow^’'’ = j \ PartPow^’^ _L] Pr[PartPow^’^ 7 ^ _L] < Pr[PartPow^’^ = j \ PartPow^’'’ / ± 

1 - 1 /r {wT{j)f 


< 


1 - 1 /r {wT{j)Y 


mV(^+i) 


\Wr 


’lll + l/£ 




□ 


To establish that YljPj — we need the following technical lemma, which holds for all integers 
£,r > 1. In the following lemma and in its proof, we use f{w), instead of and ||d||, instead of 

||r;||i_,_i/£, for simplicity. 


Lemma A. 8 . For all vectors v,w G M>q 


l/('*")l - \f{w + v)\ < 1 


I 

\{w + vY+f 


Proof. Using the definition of the Partial Power allocation f{w), we obtain that: 


|/(m)| - \f{w + v)\ = 


\w 


1 — 1 /r 
mV(f+i) 

1 — 1 /r 

777,t/(f+l) llm^l 


|(m + ■ 


\w'- 




1 - 


w + vYW j 

|(ru + r;) 


\w'- 


(w + v) 


Since |m^| < and |(m + t;)^| > ||, we obtain that 


\f{w)\ - \f{w + r;)| < (1 - 1 /r) 1 - 


< (1 - 1 /r) 1 - 


w 


(w + vY II 

II /ll 


< 1 - 




r+i| 


{w + vYW^J |(Tr^ + 'u)^+i| 


For the last inequality, we use that for the {i + 1)/Uth norm, ||m^|| |. □ 

We next show that YljeoPj — which implies the feasibility of the implementation of Partial Power 
by Mechanism |2] In fact, 'fYjeoPj < 1 is an immediate consequence of the following. In the statement of 
the lemma and in its proof, we use f{w), instead of and ||t;||, instead of ||'u||i+i/£, for simplicity. 

Also, we recall that since we regard the probability distribution of the allocation rule / as a vector over 
outcomes, |/(m)| = Yljeo i^ probability that / results in some outcome in O. 

Lemma A.9. For all integers r > 1, the following holds: 

(^fj{wT) — Pr[PartPow^’'’ = j]^ < Pr[PartPow^’'’ = _L] 
jeo 
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Mechanism 5 The Exponential Mechanism Expo"(a;, s) 

Let N be the set of the remaining agents and let L 0 
pick an outcome j G O, an integer ^ > 0 and a tuple t G 

with probability proportional to the value of the term xt^ {j)xt 2 0) • • • {j)/ 

for each agent i G f do 

if ver(i) / 1 then L L U {i} 

if L / 0 then return Expo"(a;_ 2 ,, S-l) 

else return outcome j 


Proof. For brevity, we let p = 


4+1 


„f+i 


throughout the proof. The desired inequality can be rewritten as: 


PrpartPow^’i" = _L] + Pr[PartPow^’i’ = j] > \f{wT)\ 
j€0 

We observe that the Ihs of the inequality above is 1 — Pr[PartPow^’i’ = null], which is equal to: 

1 — PrpartPow^’i' / _Li] Pr PartPow^’i’(a;, s) = null | PartPow^’i" J-i = 1 — p^ ■ (1 — |/(m)|) 

Therefore, it suffices to show that 1 — p^ ■ (1 — |/(m)|) — \f{wT)\ > 0. 

We observe that Lemma lATSl implies that |/(ru)| > \f{wT)\ — (1 — p)- Hence, it suffices fo show fhaf: 

1 - 4 • (1 - |/(mT)| - (1 - p)) -\f{wT)\ >0^ 

(1 - pi') • (1 - \f{wT)\) - - p) > 0 

Since \f{wT)\ < 1 — 1/r, we obfain fhaf 

r—1 


1-4 


-4(i-p) >0 4^ 


1-4 

1 -p 


— rp^ > 0 ^ p^ — rpi" > 0 


fe=o 


□ 


The laffer inequalify is always true because p^ > p^, for all 0 < A; < r, since p G [0,1]. 

We have shown that for all integers i,r > 1, PartPow^’i" is robust. Since the Partial Power allocation 
satisfies fhe participation consfrainf. Lemma lT2] implies fhaf PartPow^’i" is frulhful. To complefe fhe proof 
of Theorem 18.11 we sef £ = O{In m/s) and r = 0(l/e) and gel fhe desired approximation guarantee. 


A. 17 The Approximation Guarantee of Exponential 

As for the approximation guarantee of Exponential, we let j be the outcome of maximum total weight and 
let OPT = Wj = ||m||oo be j’s weight (and the optimal social welfare). We recall that the Exponential 
allocation rule with parameter a > 0 is the solution to the following optimization problem 

p* = arg max > Xi ■ p + aH {p ), 

where H{p) = — Y/j Pj Inpj is the informational entropy of p (see e.g., ifTSl ). So, we let p* be the proba¬ 
bility distribution of Expo" and let Sj be the unit vector with a single 1 in coordinate j. Then, 

OPT = ^ Xi ■ Sj + aH (ej) < ^ Xi ■ p* + aH (p*) < ^ Xi ■ p* + a\nm 
ieN ieN ieN 

The first inequality follows from the definition of p* and the second inequality holds because the maximum 
entropy of any distribution in A{0) is Inm. Therefore, the expected welfare of Expo" is Yi^N Xi ■ p* > 
OPT — a Inm. □ 


30 














